Get infomration about remote Windows logged in users, with the support of logging off a single user or all users from a single or multiple servers

A set of PowerShell cmdlets to query and disconnect local and remote sessions.

A module for generating and applying certificates for use with Remote Desktop Services on local and remote machines.

AWS EC2 KeyPair based passwordless Rdp and PSRemoting module to support scripted and automated remote management of EC2 Instances in Amazon AWS. The module also provides an Invoke-Command like cmdlet for AWS SSM Run command that fully integrates to PowerShell with optional CliXml serialization.

This function provides the functionality to start an RDP session without having to type in the password

Commands to configure RDP on Windows boxes

Programatically generates Remote Desktop Connection files.

This is a PowerShell module that is collection of utility cmdlets for Azure management operations. Details of each cmdlet is at https://github.com/tksh164/AzureUtil-PowerShellModule コマンドレットの詳細は https://github.com/tksh164/AzureUtil-PowerShellModule/blob/master/README.ja-jp.md * Get-AzureUtilEmptyResourceGroup: This cmdlet is get the resourc... More info

Automatic Log in to your Server via Remote Desktop Protocol (RDP) with PowerShell

Creates a Windows Firewall rule that blocks the IP addresses of all the network clients that have connected to RDP (not necessarily authenticated - just established a TCP connection) within the last 24 hours. This will effectively "ban" those IP addresses from making RDP password guesses for 24 hours. Modify the 'exclusions file' with IP addresses ... More info

SecureMFA RD Gateway OTP Authentication Provider. Allows MFA authentication for Microsoft RD Gateway Service. Prerequisites - Microsoft RD Gateway 2016 / 2019 - OTP data for users are stored in MS SQL Database. - .NET 4.6.1 or above. For quick start details look into Readme.txt or visit https://www.securemfa.com/downloads/mfa-rd... More info

A Powershell module of assorted gubbins and utilities that don't fit anywhere else.

Invoke-RemoteApp initializes a Remote session in Remote Application Mode.

Opens remote desktop connections to AWS EC2 instances using SSM Session Manager.

Module for managing enhanced RDP session configuration files generated by vmconnect.exe or Hyper-V Manager.

A collection of PowerShell utilities for Windows system administrators

A comprehensive PowerShell toolkit for RDP forensics analysis, tracking connection attempts, authentication, sessions, and logoffs across Windows Event Logs for security monitoring and incident response.

Real-time Windows Event Log monitoring and alerting module for PowerShell. EventMonitor.Windows enables security monitoring, automation, observability pipelines, SIEM integration, telemetry, and AI agent orchestration using EventLogWatcher for instant OS-level event delivery. Monitors 40+ event IDs across 17 groups: logon/logoff, failed authen... More info

通过 SSH localhost 让 sshd（Session 0 的 SYSTEM 服务）以当前用户身份创建进程， 再用 WMI Win32_Process.Create 绕过 sshd 的 Job Object 使进程独立存活。 进程运行在 Session 0，远程桌面登出后不会被终止。 原理： 1. SSH 连接 localhost → sshd 运行在 Session 0，故 SSH 会话继承 Session 0 2. SSH 会话内通过 WMI 创建进程 → 进程由 wmiprvse.exe 派生，脱离 sshd Job Object 3. SSH 断开后 WMI 创建的进程不受影响，持续运行在 Session 0 首次使用自动生成 SSH 密钥并配置免密登录。 若 sshd ... More info

Bulk-generate and digitally sign Remote Desktop Protocol (.rdp) connection files from a CSV and a template. Wraps rdpsign.exe with safe defaults for code-signing certificates. Part of the Dargslan Windows Admin Tools collection. More at https://dargslan.com