Windows Server 2016 Remote Desktop Services Best Practices

For the Windows Server 2016 environment you can implement the below best practices for Remote Desktop Services:

• Use Multi-Factor Authentication

  Leverage the power of Active Directory with Multi-Factor Authentication to enforce high security protection. Refer to the Microsoft documentation here: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-plan-mfa

• Secure data storage with User Profile Disks (UPDs)

  User Profile Disks (UPDs) allow user data, customizations, and application settings to follow a user within a single collection. A UPD is a per-user, per-collection VHD file saved in a central share that is mounted to a user’s session when they sign in - the UPD is treated as a local drive for the duration of that session. Refer to the Microsoft documentation here: https://docs.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-plan-secure-data-storage