3389 clear login records

Source: Internet
Author: User

Many times, because of Intranet trust or VLAN, we cannot connect to the target 3389 terminal on the outside, and it is impossible to rely on the reverse backdoor to htran every time.

Generally, you can use mstsc to connect to an intranet IP address on any machine (such as the Web) of the Intranet.

By default, there are null records or only a few IP address records that have been connected. When we connect to a new IP address in the Intranet, the connection records will be displayed by default, which is annoying. Experienced administrators can basically find

Easy to clean

HKEY_CURRENT_USER \ Software \ Microsoft \ Terminal Server Client \ default
You can directly del the non-original IP key value displayed on the right ~~ But remember where the current key value is when the default registry is opened (usually the primary key without tree separation), and restore it as the tree structure when the default function is opened.

In other words, we mainly aim at experienced administrators ^-^

Hacker cleanup techniques are more direct
XP and 2003
Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"

Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"/V portnumber

Another tips for reading 3389
1. General methods
Regedit/E c: \ 3389.reg "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"
Type C: \ 3389.reg | find "portnumber"
Del c: \ 3389.reg

2. XP and 2003
Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"/V "portnumber"

The hexadecimal value obtained by set/.

3. Script
Echo dim readcomputername> C: \ 3389.vbs
Echo set readcomputername = wscript. Createobject (^ "wscript. Shell ^")> C: \ 3389.vbs
Echo dim tsname, tsregpath> C: \ 3389.vbs
Echo tsregpath = ^ "HKLM \ System \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-Tcp \ portnumber ^"> C: \ 3389.vbs
Echo tsname = readcomputername. regread (tsregpath)> C: \ 3389.vbs
Echo wscript. Echo (^ "termservice port: ^" ^ & tsname)> C: \ 3389.vbs

Cscript 3389.vbs

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.