Server settings
Service account used to read sessions on each bench (stored encrypted on this server).
RDP firewall guard
When enabled, the dashboard tries to lock direct RDP on the bench so
only your PC can connect. If your environment doesn't allow remote
netsh -r (timeouts in logs), disable this and use the
soft lock only.
Bench Agent (recommended)
A tiny PowerShell-only agent on each bench locally manages the "Remote Desktop Users" group based on the dashboard lock. No Python install needed on the benches.
- Set
RDD_BENCH_AGENT_TOKEN=<long-random-string>in%LOCALAPPDATA%\RemoteDesktopDashboard\admin.envand restart the dashboard. - Configure Server settings above with a service account that is a local administrator on every bench.
- Type your admin PIN above, then click Push install next to a bench below — the dashboard uses the service account to SMB-copy the agent and register a SYSTEM scheduled task. (One-click. The bench needs SMB/445 reachable from this server.)
- Or, if a bench is unreachable for SMB, click Show install command and paste it into an elevated PowerShell on that bench yourself.
On the bench, the one-liner just downloads these two files from the dashboard: