Turn off Remote Desktop
Denies incoming Remote Desktop connections.
Applying it needs Nexus Standard or Pro. Every plan can read it here and undo it in Restore Center. Compare plans
What it changes
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\fDenyTSConnections = 1
Before anything is written, the review screen shows this setting's current value on your PC next to the new one.
Why it helps
Closes RDP, a frequent target of password-guessing attacks.
Trade-offs
You can't connect to this PC with Remote Desktop.
Evidence
Strong evidence means: documented by microsoft or consistently measurable. Expected impact is small (1 of 3): how much it can matter when this is actually the bottleneck on your PC, not a promised gain.
Is it in a pack?
No. Packs only contain Safe tweaks, and this one is labelled Caution.
How to undo
Switch the tweak off in Nexus, or open Restore Center and restore this change (or choose Undo last change). Nexus writes back the original value it recorded before applying, not a generic default, then reads it back to confirm.
Where it applies
- Windows Pro, Enterprise or Education (Home ignores this policy).
Anywhere else, Nexus shows it as not applicable instead of pretending it works.
More in Security hardening
- Turn off AutoRun for all drivesStops programs starting automatically from inserted USB drives and discs.SafeSecurityRecommended
- Turn off AutoPlayStops Windows asking what to do with inserted media and devices.SafeSecurity
- Turn off LLMNRDisables Link-Local Multicast Name Resolution.SafeSecurity
- Turn off smart multi-homed name resolutionStops DNS queries being sent over every network adapter at once.SafeSecurity
- Disable the SMBv1 serverTurns off the obsolete SMB1 file-sharing server protocol.SafeSecurityRecommended
- Turn off Remote AssistanceStops this PC accepting Remote Assistance invitations.SafeSecurityRecommended