Powershell: how to add RDP thumbprint of remote computers? (workgroup network)

Question

Hello,
This is more about powershell scripting.
In a workgroup network, i want to remove the RDP connection warning by adding (by script) the Terminal Server thumbprint of computers in network to each computer concerned by RDP connections.
I tried to retrieve the Thumbprint of the computer, successfully, but inserting into other computers is always refused.

$cert = Get-ChildItem -Path 'Cert:\LocalMachine\Remote Desktop'  
$hostname = hostname  
$thumbprint = $cert.Thumbprint  
  
$bytes = for($i = 0; $i -lt $cert.Thumbprint.Length; $i += 2) {  
 [convert]::ToByte($cert.Thumbprint.SubString($i, 2), 16)  
}  
  
  
$RegPath   = 'Cert:\CurrentUser' ### i don't find what to put here exactly to insert the thumbprint to HKCU\Software\Microsoft\Terminal Server CLient\Servers\ServerName\  
$AttrName  = "CertHash"  

command not working

New-ItemProperty -Path $RegPath -Name $AttrName -PropertyType Binary -Value ([byte[]]$bytes)

I don't know, if anyone can help me write a working script??

Just for information, the above script, contains both parts, reading the thumbprint, and writing thumbprint. it should be in different scripts later, once working
Thank you

Answer 1

Hi,

I am not a powershell specialist, with limited knowledge for powershell script.

But from you description, I think what you need is to configure Remote Desktop listener certificate so that you can remove the RDP connection warning.

If so, there are another two ways to achieve that. One is to use Windows Management Instrumentation (WMI) script and the other is to use registry editor.

Please follow the detailed steps in below article:
Remote Desktop listener certificate configurations
https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/remote-desktop-listener-certificate-configurations

Thanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

Hi,

If you would like to remove the RDP connection warning, you only need to configure Remote Desktop listener certificate on the Terminal servers, whether it is domain-joined environment or workgroup environment. There is no need to add the thumbprint to all the client computers.

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.