Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
Redmond desk4 min

How to Open the RDP Port for Remote Desktop in Windows

Enable Remote Desktop and allow its default port through Windows Firewall. Learn what changes for local connections, VPN access, and router port forwarding.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To allow Remote Desktop on a Windows PC, enable Remote Desktop and allow its traffic through the PC’s firewall. The default RDP port is TCP 3389, and you normally do not need to change it. For a connection from outside your local network, you also need a route such as a VPN; a Windows firewall rule alone cannot make the PC reachable through your router. Windows Home can connect to another PC as an RDP client, but it cannot host incoming Remote Desktop sessions.

Check that the PC can host Remote Desktop

Microsoft lists Windows 10 and Windows 11 Pro, Enterprise, and Education, as well as Windows Server 2016, 2019, 2022, and 2025, as editions that can host incoming Remote Desktop connections. Windows Home cannot host them. The person enabling Remote Desktop needs administrator privileges. The host PC must be powered on, awake, connected to the network, and configured to allow the connecting user.

As an Amazon Associate I earn from qualifying purchases.

Microsoft’s Remote Desktop enablement guidance covers the Windows editions and setup requirements.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Enable Remote Desktop and allow the user

  1. On the PC you want to reach, open Start > Settings > System > Remote Desktop.
  2. Turn on Enable Remote Desktop and confirm the prompt.
  3. Keep Network Level Authentication (NLA) enabled when possible. NLA requires users to authenticate before a remote session is established, and Microsoft recommends it for most environments.
  4. If the connecting account is not an administrator, use the Remote Desktop users control on that page to add the account.

Enabling Remote Desktop allows the PC to accept connections, but the host firewall and any other applicable firewall must also permit the traffic. Microsoft’s setup instructions describe the setting and user access controls.

#1 Best Overall

Allow RDP through Windows Firewall

For the standard configuration, leave the RDP listener on its default port, 3389, and allow the built-in Remote Desktop firewall rules. On a Windows PC, open Windows Security > Firewall & network protection > Allow an app through firewall, select Change settings, and allow Remote Desktop on the network profile you use. If your Windows version presents the rules in the advanced firewall interface instead, enable the applicable inbound Remote Desktop rules there. Avoid enabling access on network profiles you do not use.

On a normal local-network connection, no router change is needed. If you use a third-party firewall, its rules must also allow the configured RDP port. Microsoft documents the default listener and firewall configuration in its listener-port guidance.

Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.

Connect from another PC on the same network

  1. On the client PC, open the Remote Desktop client. In Windows, search Start for Remote Desktop Connection.
  2. Enter the host PC’s name or local IP address, then connect and sign in with an account allowed on the host.

If the PC name does not resolve, try its local IP address. A local client connects to the host over the LAN; port forwarding on the router is not required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Reach the PC from outside your local network

A firewall rule on the Windows PC does not route an internet connection through the router or company perimeter. To reach a personal PC while away, use a VPN that gives the client access to the PC’s network, or configure port forwarding on the router. Microsoft prefers VPN: forwarding exposes the PC to the internet. If forwarding is necessary, restrict the router rule to known source IP addresses or networks when the router supports it, rather than allowing connections from everywhere.

Rank #3
15.6 Inch Win 11 Laptop Computer, N4020, 4GB DDR4 RAM, 128GB Storage | LPDDR4 RAM, 180° Lay-Flat, Dual-Band WiFi, Type-C PD Fast Charging, Thin & Lightweight for Students, Home & Office, Gray
  • WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
  • 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
  • 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
  • CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
  • LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
Option Public internet exposure What you need Source-network restriction
VPN The RDP service need not be exposed directly to the public internet. A VPN that provides access to the PC’s local network; organizations may require their approved VPN. Access is governed by the VPN and network configuration.
Router port forwarding Forwards external connections to the PC and exposes it to the internet. A router rule mapping an external port to the PC’s current internal address and RDP port. Restrict allowed source IP addresses or networks if the router supports it.

Router menus vary by model, so use its documentation to configure a rule for the correct PC and port. For workplace access, follow your organization’s approved method; Microsoft identifies VPN, Remote Desktop Gateway, and RD Web Access as options in its Remote Desktop access guidance. See Microsoft’s guide to connecting from outside your network for the VPN and forwarding approaches.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Change the RDP port only when there is a reason

Changing the default port adds configuration work and is not, by itself, a security fix. If you have a specific reason to use another port, update the listener, firewall rules, any intervening router or firewall, and the client address so they all agree. Microsoft documents the listener value at HKLM:SYSTEMCurrentControlSetControlTerminal ServerWinStationsRDP-Tcp, named PortNumber, and provides PowerShell and Registry Editor procedures in its instructions for changing the listening port.

For a custom port, Microsoft’s example creates inbound TCP and UDP firewall rules with New-NetFirewallRule. If you change the port through Registry Editor, follow Microsoft’s instruction to restart the PC. Then connect using hostname:port, such as pc1.contoso.com:3390, replacing the example values with your host and configured port.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshoot a failed connection

  1. Check reachability: Make sure the target PC is on, awake, and connected. Try its IP address if its name does not work.
  2. Check host eligibility and settings: Confirm the Windows edition can host RDP and that Remote Desktop is enabled.
  3. Check access and sign-in: Confirm the account is allowed to connect and that the credentials are correct.
  4. Check firewall rules: Verify Windows Firewall and any third-party or network firewall allow the configured port. For a non-default port, compare the listener, firewall, router rules, and client address.
  5. Check the listener: If the PC is reachable but connections still fail, verify that a listener is running on TCP 3389 or the port you assigned, and check for a port conflict. Microsoft’s troubleshooting guidance describes using netstat and process lookup to investigate.
  6. Separate host access from internet routing: For a connection from outside the LAN, verify the VPN or router route as well as the Windows firewall rule.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.