I needed to enumerate RDP configurations when nmap, and nessus were not available to me. I found this blog post which described exactly the registry keys required.

A bit of poking and so the PowerShell rdp-enum was born:

• https://github.com/cornerpirate/rdp-enum

Does exactly what it says on the tin.

Hope it helps