---
title: RDP Profiles
slug: kronpam-reference-guide-3-9-0/rdp-profiles
description: Learn how to create and manage RDP profiles for grouping permissions in RDP sessions. Customize user permissions, such as clipboard functionality and file downloads/uploads, by assigning RDP profiles to different policy realms. Easily create new profiles,
docTags: 
createdAt: 2022-07-27T16:27:11.000Z
---

Some of the permissions for RDP sessions can be grouped in RDP profiles. These profiles appear in the Policy Keys list in the Policy Groups screen so that they can be assigned to different Policy Realms to allow or restrict user permissions.
Currently, the following permissions can be set using RDP Profiles:

- **Disable Text Copy & Paste**
   Copy-paste operations from/to RDP servers are disallowed when chosen. When this option is enabled the clipboard will be inaccessible in both directions, but the two options below can be chosen.
  Copy and paste behavior may vary from browser to browser, as some web browsers such as Firefox do not allow applications access to their clipboards. For our use of the clipboard so far, we refer to Chrome.
- **Enable Clipboard from Endpoint to Local**
  Upon disabling the clipboard, users can choose to enable clipboard operations in one direction from the endpoint to local. This will allow users to extract clipboard data from the RDP session.
- **Enable Clipboard from Local to Endpoint**
  Upon disabling the clipboard, users can choose to enable clipboard operations from the local machine to the endpoint. This will allow users to send local clipboard data to the RDP session.
- **Disable File Download:** File download operations to/from RDP servers are disallowed when selected, or allowed when unselected.
- **Disable File Upload: **File upload operations to/from RDP servers are disallowed when selected, or allowed when unselected.
- **Enable CTRL+ALT+DEL **
  When this option is enabled on the RDP Proxy session, there will be a clickable button
   to emulate CTRL+ALT+DEL keystrokes.
- **Enable CTRL+SHIFT+ESC**
  When this option is enabled on the RDP Proxy session, there will be a clickable button
   to emulate CTRL+SHIFT+ESC keystrokes.

If you want an RDP profile to apply only during specific periods, you can add a time restriction to the policy group. This ensures that the RDP Profile is only active within the defined time frame and behaves as if it doesn't exist outside of these periods. If there is no Time Restriction specified in the policy group, the RDP profile always remains active. Before the time expires (about 1 minute left), Kron PAM warns that the session will be terminated
. ([Warning Before Endtime in RDP Proxy](docId\:cwLDSXxmu98OWHYNdiLNZ))

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/6sdunMIB2h8M-A68efZRv_image.png "RDP Profile Time expiration Warning")

To create a new RDP Profile:

1. Navigate to **Policy  > Policy > Add.**
2. Select the **RDP Profile** tab.
3. Fill out the **Name** and **Description** fields.
4. Select the permissions to be given and click **Save**.
5. The **RDP Profile **now appears in the** All Policy Keys** table.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-Ku9sK_XNbf73fvy8--si_image.png "RDP Profile Options")