A free, open-source educational knowledge base for system administrators. Learn how to configure, secure, and optimize your multi-server environment efficiently.
100% free to read. No sign-up, no email, no downloads hosted on this site.
Understanding why a centralized connection manager beats juggling dozens of standalone RDP shortcuts.
Group servers by data centers, projects, or clients in a nested tree view, turning a chaotic list of hostnames into a navigable, logical structure.
Save hours by defining login credentials at the group level so sub-servers automatically inherit them, without re-entering passwords for every host.
View dozens of live server thumbnails simultaneously on a single control screen, making it easy to spot anomalies across an entire fleet at a glance.
Follow this sequence to go from zero to a fully organized, secure remote server management console.
RDCMan is developed and distributed exclusively by Microsoft as part of the Sysinternals suite. For the actual installer, always use the official Microsoft Learn Sysinternals page: learn.microsoft.com/sysinternals/downloads/rdcman. This website never hosts or mirrors the executable itself.
RDCMan is part of the Microsoft Sysinternals suite. To ensure you receive a clean, unmodified, and up-to-date build, only obtain it from the official Microsoft Learn / Sysinternals domain. Avoid third-party mirrors, forum attachments, or unofficial archive sites, which may bundle outdated or altered binaries.
Launch RDCMan and create a new .rdg file to serve as your connection database. Right-click the root node and choose "Add Group" to create top-level categories (e.g. Production, Staging, Client-A). Nest additional sub-groups inside each parent to mirror your real infrastructure layout — this keeps hundreds of servers navigable at a glance.
Open Group Properties → Logon Credentials. To assign environment-specific credentials, uncheck Inherit from parent and enter the appropriate username, domain, and password for that group. Passwords are encrypted locally using the Windows Data Protection API tied to your user profile, keeping domain administrative secrets out of plain text configuration files.
Under Group Properties → Remote Desktop Size, set the value to Same as client area and enable Smart Groups. This ensures each remote session automatically scales to fill your window regardless of the host's native resolution, eliminating black bars and manual resizing across mixed-DPI multi-monitor setups.
RDCMan stores everything in a single portable .rdg XML file — understanding its structure helps you back up, version, and share connection trees safely.
An XML document holding your entire group tree, server list, and per-group display preferences — portable across machines with no installer required.
Stored credentials are encrypted via the Windows DPAPI and tied to your local Windows profile, so a copied .rdg file cannot be decrypted on another machine.
Each node in the tree can inherit display, logon, and gateway settings from its parent group, only overriding what is explicitly set at a lower level.
Plain-language definitions of the terminology you'll encounter throughout this manual.
A quick-reference table of the most frequently encountered RDCMan errors and their documented remedies.
| Issue | Likely Cause | Recommended Fix |
|---|---|---|
| CredSSP encryption oracle remediation error | Mismatched CredSSP patch levels between client and target server following a security update. | Update Group Policy or registry AllowEncryptionOracle settings, and ensure Network Level Authentication is consistently enforced on both ends. |
| "An authentication error has occurred" on connect | Expired, revoked, or mismatched credentials stored at the group level. | Open Group Properties → Logon Credentials, re-enter valid credentials, and confirm the target domain name is correctly formatted. |
| Thumbnails freeze or stop refreshing | High latency or an interrupted network path to the remote host during multi-session monitoring. | Reduce the concurrent thumbnail refresh interval in options and verify the network route via a basic connectivity test. |
| Remote session opens at the wrong resolution | "Remote Desktop Size" is set to a fixed resolution instead of following the client window. | Set Remote Desktop Size to "Same as client area" and enable Smart Groups for automatic scaling. |
| Group settings not applying to child servers | "Inherit from parent" was left unchecked at a lower node, overriding the intended group-wide configuration. | Re-check "Inherit from parent" on the affected server or sub-group properties to restore the intended inheritance chain. |
Transparency about what this resource is, and what it deliberately is not.
No. This website does not host, distribute, or sell any installer, .msi, or .exe file. We only provide educational documentation and point readers toward the official Microsoft Sysinternals deployment channels for the actual software.
No. This is a 100% independent, unofficial knowledge base created by system administrators for educational purposes. We have no affiliation, sponsorship, or endorsement from Microsoft Corporation or the Sysinternals team.
Never. Every module on this page is freely readable with no registration, paywall, or email capture of any kind. There is nothing to purchase and no premium tier.
We cover session hierarchy design, credential delegation architecture, display/resolution configuration, .rdg file structure, and common troubleshooting scenarios encountered by administrators managing large server fleets.