I needed to enumerate RDP configurations when nmap, and nessus were not available to me. I found this blog post which described exactly the registry keys required. A bit of poking and so the PowerShell rdp-enum was born: https://github.com/cornerpirate/rdp-enum Does exactly what it says on the tin.Hope it helps
