3389 clear login records

Many times, because of Intranet trust or VLAN, we cannot connect to the target 3389 terminal on the outside, and it is impossible to rely on the reverse backdoor to htran every time.

Generally, you can use mstsc to connect to an intranet IP address on any machine (such as the Web) of the Intranet.

By default, there are null records or only a few IP address records that have been connected. When we connect to a new IP address in the Intranet, the connection records will be displayed by default, which is annoying. Experienced administrators can basically find

Easy to clean

HKEY_CURRENT_USER \ Software \ Microsoft \ Terminal Server Client \ default
You can directly del the non-original IP key value displayed on the right ~~ But remember where the current key value is when the default registry is opened (usually the primary key without tree separation), and restore it as the tree structure when the default function is opened.

In other words, we mainly aim at experienced administrators ^-^

Hacker cleanup techniques are more direct
XP and 2003
Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"

Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"/V portnumber

Another tips for reading 3389
1. General methods
Regedit/E c: \ 3389.reg "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"
Type C: \ 3389.reg | find "portnumber"
Del c: \ 3389.reg

2. XP and 2003
Reg query "HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-TCP"/V "portnumber"

The hexadecimal value obtained by set/.

3. Script
Echo dim readcomputername> C: \ 3389.vbs
Echo set readcomputername = wscript. Createobject (^ "wscript. Shell ^")> C: \ 3389.vbs
Echo dim tsname, tsregpath> C: \ 3389.vbs
Echo tsregpath = ^ "HKLM \ System \ CurrentControlSet \ Control \ Terminal Server \ winstations \ RDP-Tcp \ portnumber ^"> C: \ 3389.vbs
Echo tsname = readcomputername. regread (tsregpath)> C: \ 3389.vbs
Echo wscript. Echo (^ "termservice port: ^" ^ & tsname)> C: \ 3389.vbs

Cscript 3389.vbs