If you are seeing this and are concerned or having issues, here is a quick guide:
The presence of an ID like mstsc-4b0a31aa... usually indicates a logged event where the RDP client attempted to negotiate a connection but failed or was interrupted. These logs are often paired with an Event ID (most commonly or Event 1102 ). mstsc-4b0a31aa-df6a-4307-9b47-d5cc50009643
the mstsc-4b0a31aa-df6a-4307-9b47-d5cc50009643 folder in the registry. Select Delete . If you are seeing this and are concerned
This GUID may have been sent to Microsoft for telemetry. You can search for it in: You can search for it in: : mstsc
: mstsc.exe is the legitimate Microsoft Remote Desktop Connection client used to connect to other computers over a network.
Check the UsernameHint or associated MRU (Most Recently Used) values to identify the remote server it connects to [2]. 2. Deleting the Session Cache