Skip to content

Update end user experience and compatibility requirements for browser-based rdp #23271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 9 commits into from
Closed

Update end user experience and compatibility requirements for browser-based rdp #23271

Changes from 7 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
580f34c
Update end user exp
asamborski Jun 26, 2025
b577d1a
Merge branch 'production' into asamborski_enduseruxforrdp
asamborski Jun 26, 2025
97b4ed9
Update user identifier formats
asamborski Jun 26, 2025
c19860d
adding in known limitations
asamborski Jun 26, 2025
e10e53a
adding addtl UPN example
asamborski Jun 27, 2025
856a52d
more examples for SAM
asamborski Jun 27, 2025
e74ff5b
adding clipboard file formats supported
asamborski Jun 27, 2025
77a4901
adjustments thanks to some feedback!
asamborski Jun 27, 2025
8cc4506
responding to feedback
asamborski Jun 30, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 51 additions & 3 deletions .../docs/cloudflare-one/connections/connect-networks/use-cases/rdp/rdp-browser.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -144,7 +144,7 @@ To connect to a Windows machine over RDP:
The App Launcher tile will launch a URL of the form `https://<app-domain>/rdp/<vnet-id>/<target-ip>/<port>`. You may also navigate directly to this URL.
4. Select the port that you want to connect to. The port selection screen only appears if the Access application allows RDP traffic on multiple ports (for example, port `3389` and port `65321`).
5. (Optional) In your browser settings, allow the Access application to access the clipboard. Clipboard permissions grant the ability to copy or paste text between the local machine and the remote Windows machine.
6. Enter your Windows username and password.
6. Enter your Windows username and password. The section below on compatibility covers which formats are supported for login credentials.

You now have access to the remote Windows desktop.

Expand Down Expand Up @@ -174,6 +174,51 @@ Browser-based RDP supports connecting to Windows machines that run the following
| Other Chromium-based browsers (Opera, Brave) | ✅ |
| Internet Explorer 11 and below | ❌ |

### User identifier formats

Browser-based RDP supports connecting to Windows machines with the following formats:

#### Security Accounts Manager (SAM)

SAM is supported with and without spaces.

`domain\user with spaces` format:
- The domain may have a maximum of 20 characters.
- The username may have a maximum of 15 characters.

`.\user` format:
Copy link
Contributor

@ranbel ranbel Jun 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@asamborski Could we add .\username to the examples below? Do the same limitations apply to the Username and User name examples?

Copy link
Contributor Author

@asamborski asamborski Jun 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will do! Same character limitations apply between usernames with space and without spaces. The only time that changes if if you specify the domain\ or use the default domain .\

Copy link
Contributor Author

@asamborski asamborski Jun 30, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

8cc4506

- This uses the default domain.
- The username may have a maximum of 20 characters.

Examples:
- `DOMAIN\user with spaces`
- `DOMAIN\user`
- `Username`
- `User Name`

#### User Principal Name (UPN)

UPN is supported with spaces, quotes, and unquoted.

Examples:
- `"user with spaces"@domain.org`
- `user with [email protected]`
- `[email protected]`

:::note
Cloudflare will not configure any user identifier on the target. Any user identifier used to authenticate must be pre-configured on the server.
:::

### Clipboard file formats

Browser-based RDP supports the following file formats for clipboard copy and paste actions:
- "text/plain"
- "text/html"
- "image/png"
- "HTML Format" (via CF_HTML)
- CF_UNICODETEXT
- CF_DIBV5 (Windows native bitmap formats)

### Cloudflare products

<Render file="access/self-hosted-app/product-compatibility" product="cloudflare-one" />
Expand All @@ -183,7 +228,10 @@ Browser-based RDP supports connecting to Windows machines that run the following
Browser-based RDP does not currently support:

- TLS certificate verification: Cloudflare uses TLS to connect to the target RDP server but does not verify the origin TLS certificate.
- [WARP authentication](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/#configure-warp-sessions-in-access)
- Audio over RDP
- [WARP authentication](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-sessions/#configure-warp-sessions-in-access).
- Clipboard copy and paste control: the ability to define if users can copy/paste content from the remote machine to their local machine and vice versa.
- Audio over RDP.
- File transfer.