9.3.1 Obtain an authorized interactive desktop session RDP Access

← Stage index · Service validation · Next: File transfer | Strategy map | Study methods: Check which other hosts your current identity can access

Purpose: use a validated identity with Remote Desktop logon rights to establish a Windows desktop and verify the resulting source position.

9.3.1.1 Baseline: prompt for the password

xfreerdp3 /v:TARGET /u:USER /dynamic-resolution /cert:ignore

Some Kali releases expose xfreerdp instead of xfreerdp3; check command -v xfreerdp3 xfreerdp and the selected binary's /help output.

Decisive output: a usable desktop establishes a remote session. Open PowerShell or Command Prompt and verify whoami, hostname and ipconfig before treating commands as target-origin execution.

9.3.1.1.1 Variant — domain identity

xfreerdp3 /v:TARGET /u:USER /d:DOMAIN /dynamic-resolution /cert:ignore

Local and domain accounts with the same username are different identities. Make the intended context explicit when results differ.

9.3.1.1.2 Variant — authentication only

xfreerdp3 /v:TARGET /u:USER /d:DOMAIN /auth-only /cert:ignore

This tests authentication without opening the UI. Success does not guarantee that all session policies or desktop initialization will permit a full session.

9.3.1.1.3 Variant — explicit password

xfreerdp3 /v:TARGET /u:USER '/p:PASSWORD' /dynamic-resolution /cert:ignore

Prefer prompting because command-line passwords can enter shell history and process listings.

Failure cues: a certificate warning is not a credential result. NLA/security negotiation, account context, authentication, Remote Desktop logon rights and an already occupied/restricted session can fail separately. /cert:ignore is appropriate only for the controlled lab context because it removes certificate identity validation.

Next: after verifying the host and identity, enumerate groups/privileges, files, local services/listeners and routes from the new source position.