Editing Remote Desktop Protocol (section)

=== Version 8.1 ===
This version was released with [[Windows 8.1]] and [[Windows Server 2012 R2]]. The RDP 8.1 client, like the RDP 8.0 client, is available on Windows 7 SP1 and Windows Server 2008 R2 SP1 through KB2923545 but unlike the RDP 8.0 update for Windows 7, it does not add a RDP 8.1 server component to Windows 7. Furthermore, if RDP 8.0 server function is desired on Windows 7, the KB 2592687 (RDP 8.0 client and server components) update must be installed before installing the RDP 8.1 update.<ref name="kb2830477">{{cite web |url=http://support.microsoft.com/kb/2830477 |title=Update for RemoteApp and Desktop Connections feature is available for Windows |publisher=Support.microsoft.com |date=2014-02-11 |access-date=2014-03-11 |archive-date=February 9, 2014 |archive-url=https://web.archive.org/web/20140209174746/http://support.microsoft.com/KB/2830477 |url-status=live }}</ref><ref>{{cite web |url=http://blogs.msdn.com/b/rds/archive/2013/11/12/remote-desktop-protocol-8-1-update-for-windows-7-sp1-released-to-web.aspx |title=Remote Desktop Protocol 8.1 Update for Windows 7 SP1 released to web – Remote Desktop Services (Terminal Services) Team Blog – Site Home – MSDN Blogs |publisher=Blogs.msdn.com |access-date=2014-02-13 |archive-date=February 22, 2014 |archive-url=https://web.archive.org/web/20140222013055/http://blogs.msdn.com/b/rds/archive/2013/11/12/remote-desktop-protocol-8-1-update-for-windows-7-sp1-released-to-web.aspx |url-status=live }}</ref>

Support for session shadowing was added back in RDP version 8.1. This version also fixes some visual glitches with [[Microsoft Office 2013]] when running as a [[RemoteApp]].<ref name="kb2830477" />

Version 8.1 of the RDP also enables a "restricted admin" mode. Logging into this mode only requires knowledge of the hashed password, rather than of its [[plaintext]], therefore making a [[pass the hash]] attack possible.<ref>{{cite web |url=https://labs.portcullis.co.uk/blog/new-restricted-admin-feature-of-rdp-8-1-allows-pass-the-hash/ |title=New "Restricted Admin" feature of RDP 8.1 allows pass-the-hash |publisher=Labs.portcullis.co.uk |date=2013-10-20 |access-date=2014-03-11 |archive-date=February 10, 2014 |archive-url=https://web.archive.org/web/20140210131158/http://labs.portcullis.co.uk/blog/new-restricted-admin-feature-of-rdp-8-1-allows-pass-the-hash/ |url-status=live }}</ref> Microsoft has released an 82-page document explaining how to mitigate this type of attack.<ref>{{cite web
|url=http://www.microsoft.com/en-gb/download/details.aspx?id=36036
|title=Mitigating Pass-the-Hash (PtH) Attacks and Other Credential Theft Techniques
|publisher=Microsoft.com
|access-date=2014-03-11
|archive-date=April 21, 2014
|archive-url=https://web.archive.org/web/20140421164128/http://www.microsoft.com/en-gb/download/details.aspx?id=36036
|url-status=live
}}</ref>