Thank You! It works. I tested it between my working place and my home with option security_layer=tls set instead of negotiate. clients: xfreerdp (linux) rdesktop (linux) remotedesktop (Windows 10) xfreerdp has a small resolver bug, as long a A-record is available, AAAA-Record is ignored, but this is a different problem.