SMA1000: Impact of Windows RDP Security Update (April 2026)

Starting with the April 2026 Windows security update, Microsoft changed how the Remote Desktop Connection app (mstsc.exe) handles .rdp files. This article explains the change and describes the expected behavior for each SMA1000 RDP access method.

Applies To

• WorkPlace HTML5 RDP Shortcuts 
• Native RDP Shortcuts launched through the Workplace
• Native RDP clients used manually over a Connect Tunnel or Mobile Connect session

WorkPlace HTML5 RDP Shortcuts: Not Affected 

A WorkPlace HTML5 RDP Shortcut render entirely inside the browser - users will not see the new Microsoft security dialog and no changes are required. 

Native RDP Shortcuts launched through the Workplace: Affected

When a Shortcut is set to launch from the Workplace using Native mode, the SMA Connect Agent builds a temporary .rdp file containing the redirection settings configured on the Shortcut in AMC (for example, Drives, Printers, Clipboard) and passes that file to mstsc.exe. Because this is "opening an .rdp file," the new Windows dialog now appears on every connection, and every redirection defaults to off.

Expected behavior going forward:

• A new security dialog appears before each Native RDP session connects.
• Any redirection previously configured is unchecked by default, users must manually check the boxes during each prompt
• This is expected Windows client behavior following the April 2026 update rather than a defect in SMA1000.

Native RDP Over Connect Tunnel or Mobile Connect: Not Affected 

When a user connects via a Connect Tunnel or Mobile Connect session and then manually opens Remote Desktop Connection and types a server name or IP address, no .rdp file is involved, and this workflow is unchanged.

Note: if a user has saved their own .rdp shortcut file for a server reached over the tunnel, opening that saved file is still subject to the new dialog, since it is still "opening an .rdp file," even though the user created it themselves.