Use port range for RDP Shortpath for unmanaged networks
This policy setting allows you to specify the UDP port range the Azure Virtual Desktop client will use to communicate with the session host when RDP Shortpath for public networks is used. If you enable this policy setting, the Azure Virtual Desktop client will randomly select the port from the range for every connection. If the specified port range is exhausted, the client's operating system will choose a port to use. If you disable or do not configure this policy setting, the operating system on the client will select a port used for the session (recommended) If you enable this policy setting, we recommend configuring firewall rules on the client to allow inbound UDP connection in this port range for Azure Virtual Desktop clients. If you do not configure firewall rules, Windows Defender Firewall may prompt the user to allow communication. If you enable this policy setting, you can also customize a UDP port range for the Azure Virtual Desktop client. When choosing the base and pool size, consider the number of ports setting to ensure that the upper bound does not exceed 49151. For example, if you select 38300 as a port base and 1000 as pool size, the upper bound will be 39299. UDP port base: This setting allows you to customize the base for the UDP port range. The default base port is 38300 (recommended). You can select any value in the 1024-49151 range for the base. Port pool size: This setting allows you to select how many ports will be in the UDP port range. Default (recommended) is 1000.
Policy Details
- Policy Name
- AVD_SERVER_UDP_STUN_CLIENT_PORT_RANGE
- Registry Key
- SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
- Value Name
- ICEEnableClientPortRange
- Supported On
- Azure Virtual Desktop
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us
Configuration Elements
UDP port base
Type: decimal
Default: 38300
Port pool size
Type: decimal
Default: 1000