Microsoft Resolves Issues with Incorrect Remote Desktop Connection Warnings
Windows Security Updates Cause Issues With Remote Desktop Warnings
Microsoft has released a cumulative update to address a known issue affecting the display of security warnings when opening Remote Desktop (.rdp) files.
The issue, which affects all supported Windows versions, including Windows 11 and Windows 10, occurs when users have multiple monitors with different display scaling settings.
The problem was introduced with the April 2026 cumulative updates, which disabled risky shared resources by default as a defense against phishing attacks that abuse Remote Desktop connection (.rdp) files.
However, the security warnings appearing when opening RDP files may not display correctly on affected Windows systems.
These warnings were designed to inform users about the potential risks associated with opening unverified RDP files.
- When users open an RDP file for the first time, a one-time educational prompt appears, warning about the associated risks.
- A security dialog is displayed before any connection is made, showing whether the file is signed by a verified publisher, the remote system’s address, and all local resource redirections (including drives, clipboard, or devices), with every option disabled by default.
If RDP files are not digitally signed, Windows displays a “Caution: Unknown remote connection” warning, labeling the publisher as unknown.
Conversely, if the files are digitally signed, Windows warns users to verify their legitimacy before connecting.
The issue, caused by a VSS (Volume Shadow Copy Service) timeout, has been reported by several users.
The security updates were released alongside 34 other changes, including the optional KB5083631 preview cumulative update for Windows 11.
As part of its efforts to improve security, Microsoft has taken steps to address various issues related to Remote Desktop connections.
In recent months, the company has released several out-of-band (OOB) updates to fix multiple Windows Server issues that caused restart loops and update installation failures after installing the April 2026 security updates.
