Disable RDP Clipboard Redirection via Regedit

Disabling clipboard redirection prevents users from copying sensitive text, files, and data out of a Remote Desktop (RDP) session to their local machines. By modifying the Windows Registry on the host server or target machine, administrators can enforce strict data loss prevention policies and block the bidirectional clipboard sharing feature entirely.

Step-by-Step Registry Configuration

To block clipboard copy-and-paste operations for all remote users, apply the change under the local machine policy key:

  1. Press Windows Key + R, type regedit, and press Enter to launch the Registry Editor.

  2. Navigate to the following path:

    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services

    (If the Terminal Services key does not exist under Windows NT, right-click Windows NT, select New > Key, and name it Terminal Services.)

  3. Right-click on the Terminal Services folder, select New > DWORD (32-bit) Value, and name it:

    fDisableClip

  4. Double-click fDisableClip, set the Value data to 1, and ensure the Base is set to Hexadecimal.

  5. Click OK to save the changes.

Apply the Setting via Command Prompt

For quick deployment or automation via scripts, run the following command in an elevated Command Prompt:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v fDisableClip /t REG_DWORD /d 1 /f

Applying and Verifying the Changes

Registry changes to Terminal Services policies require either a service restart or a system reboot to take full effect for new sessions.

  1. Disconnect any active user sessions.
  2. Restart the Remote Desktop Services service via services.msc, or reboot the target computer.
  3. Establish a new RDP session and attempt to copy text from inside the remote session to the host machine. The clipboard will be disabled, preventing any text or data transfer.