Automatically open RDP files only from RDS RemoteApp?

[Mike Leone]

OK, so now I'm finally gotten everything to the point where the end user is treating the .rdp file generated by the Published RemoteApp of my RDS environment. It's not prompting to trust it, which is what I want.

BUT ...

Now, if I can just figure out why it's always asking me what I want to do with the .rdp file when I click on a published RemoteApp .. I always say "Open". It says that the .rdp could harm my device, do I want to keep it anyway. I say Keep.

Then I get prompted to log in, as I expect.

Why is it not just opening that .rdp? I've missed setting something somewhere, but where? How can I tell it to automatically open .rdp files, but specifically just the ones generated by my RDS environment, and signed by the cert I issued (which is in the Trusted Publisher cert store of the end user)? I don't seem to have that working ...

I find things like

https://techcommunity.microsoft.com/discussions/edgeinsiderenterprise/always-open-specific-file-types/1551407/replies/1555442#M2221

which apparently tells Edge to always open .rdp files.

I want them to auto open only .rdp files that come from my trusted publisher.

How are you handling that? Or are you not setting that, either?

--

Mike. Leone, <mailto:tur...@mike-leone.com>

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos>

[Philip Elder]

If it _is_ the Trusted Sites that “fixes” the “problem” then there’s some issues with the way Group Policy is configured for network locations.

 

Philip Elder MCTS

Senior Technical Architect

Microsoft High Availability MVP

MPECS Inc.

E-mail: Phili...@mpecsinc.ca

Phone: +1 (780) 458-2028

Web: www.mpecsinc.com

Blog: blog.mpecsinc.com

Twitter: Twitter.com/MPECSInc

Teams: Phili...@MPECSInc.Cloud

 

Please note: Although we may sometimes respond to email, text and phone calls instantly at all hours of the day, our regular business hours are 8:00 AM - 5:00 PM, Monday thru Friday.

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CAHBr%2B%2Bi56uhqVS_cq9Weo0jj_D1LAB3rg_z%2BznyEf0_OGywpUA%40mail.gmail.com.

[Mike Leone]

Hmmm ... something isn't quite right.

I set the URL of my RDS sites in the GPO Site-to-Site Zone Mapping, setting it to value 2 (Trusted Site)

Yet when I go to any of those sites, and click on a RemoteApp, I'm still prompted:

I then have to click on open the file.

Any ideas where I might have taken a wrong turn?

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/1378595c48d14388aa48de8e6c522154%40MPECSInc.Ca.

[James Iversen]

I’m discovering that the latest templates depreciate the sites to zone assignments. 

Sent from my iPhone

On Oct 28, 2025, at 1:17 PM, Mike Leone <tur...@mike-leone.com> wrote:



Hmmm ... something isn't quite right.

I set the URL of my RDS sites in the GPO Site-to-Site Zone Mapping, setting it to value 2 (Trusted Site)

<image.png>

Yet when I go to any of those sites, and click on a RemoteApp, I'm still prompted:

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CAHBr%2B%2Bh3aUV05SO%2B%3DoX0rx0A5nJ%2BjQEm%2B24E%2B5T%3D6gF8bpgCuA%40mail.gmail.com.

[Denes, Laszlo]

I soooooooooooooooo despise when they do that… it messes up so many things for me… arghhhhhhhhhhhhhhhhhh and then they leave the settings in the template anyway even though it is deprecated … arrghhhh

 

Thank you in advance for your time.

 

Laszlo

 

Laszlo Denes

Technical Analyst Servers

Information Systems

t: ext. 214

lde...@torontograce.org

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/4CF145BB-998E-4662-A973-3E18B665EDC8%40gmail.com.

[James Iversen]

Almost like they anticipated a new series of browser settings requiring dependency on a SQL DB to enforce policies. Ahhh progress.

Sent from my iPhone

On Nov 19, 2025, at 7:35 AM, 'Denes, Laszlo' via ntsysadmin <ntsys...@googlegroups.com> wrote:



To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/YTBPR01MB284648523DCDAF155694EA17BAD7A%40YTBPR01MB2846.CANPRD01.PROD.OUTLOOK.COM.