iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
To enable RDP on Ubuntu 22.04, install the xrdp package, start and enable its systemd service, use an Xorg session, allow TCP port 3389 only from a trusted network, and ensure the xrdp account can read its TLS certificate. Then connect with a Microsoft Remote Desktop client, Remmina, or another RDP client. If authentication succeeds but the desktop is blank, log out of the same account’s local console session and reconnect.
This procedure is for Ubuntu 22.04 (Jammy), including desktop installations and Ubuntu Server systems where you first install a graphical desktop. It creates a separate remote login session; it is not the same as sharing the screen that is already open at the physical console.
What xrdp provides on Ubuntu 22.04
xrdp is an open-source RDP server. It lets an RDP client negotiate a graphical session with an Ubuntu machine, authenticate an Ubuntu user, and start a desktop over the network. The normal listener is TCP port 3389.
On Jammy, xrdp works most reliably with an Xorg-based session. Ubuntu uses Wayland by default on most systems without NVIDIA desktop graphics, while the xrdp login screen offers Session Xorg. Choosing that session avoids many failures caused by trying to start a Wayland desktop through xrdp.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Decide first whether xrdp is the right remote-desktop model:
- New login session: xrdp is suited to signing in remotely and getting a desktop session that is independent of the physical monitor.
- Share the existing console: Ubuntu’s built-in remote-desktop features are designed for sharing an already active desktop. Their behavior and supported releases differ from the xrdp workflow described here.
- Several users: xrdp can create separate sessions, but each account still needs a compatible desktop environment and sufficient system resources.
Do not expose RDP directly to the public internet unless you have a carefully managed security design. Ubuntu’s remote-desktop guidance describes open remote-desktop ports as a security risk; a VPN or a private network path is preferable when the client is outside your trusted LAN.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsBefore you install
Confirm the Ubuntu edition and desktop
Run the following on the Ubuntu host:
lsb_release -a
printf 'nDesktop session: %sn' "$XDG_CURRENT_DESKTOP"A normal Ubuntu Desktop installation already has GNOME and the packages needed to draw a graphical session. If this is Ubuntu Server, install a desktop environment before xrdp. Ubuntu’s AWS procedure uses the Ubuntu desktop metapackage:
sudo apt update
sudo apt install -y ubuntu-desktopThe desktop installation can download a substantial amount of data and may take time. Reboot if the desktop installation requests it, then continue from a terminal or SSH connection.
Have an account that can log in graphically
Use a local Ubuntu user with a password. A locked account, an account without a home directory, or a user whose shell is set to /usr/sbin/nologin cannot complete a normal xrdp login. If you need a separate account, create it before connecting:
sudo adduser remoteuserGive that account administrative rights only if it genuinely needs them; xrdp does not require every remote user to be an administrator.
Recommended Free Tools
Install and start xrdp
Install the package
Refresh APT metadata and install xrdp:
sudo apt update
sudo apt-get install -y xrdpThe package creates the service and its configuration under /etc/xrdp/. The documented package command is sudo apt-get install -y xrdp; using apt for the metadata update is equivalent for this purpose.
Enable the service at boot
Start xrdp immediately and make it start automatically on future boots:
sudo systemctl enable --now xrdp
sudo systemctl status xrdp --no-pagerThe status should show active (running). If it is inactive or failed, inspect the journal before attempting a client connection:
sudo journalctl -u xrdp -b --no-pagerTo restart after a configuration change, use:
sudo systemctl restart xrdpOlder Ubuntu instructions also show /etc/init.d/xrdp restart. On Ubuntu 22.04, systemd’s systemctl interface is the clearer way to control this service.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Make an Xorg session available
Select Session Xorg at login
When the xrdp login window appears, open its session selector and choose Session Xorg, then enter the Ubuntu username and password. This choice matters because Jammy defaults to Wayland on most non-NVIDIA systems, while xrdp’s common desktop path is Xorg.
Ubuntu’s release guidance uses the label Ubuntu on Xorg when selecting a non-Wayland session from the normal login manager. The labels are not identical in every screen: choose the xrdp option explicitly named Session Xorg, and use Ubuntu on Xorg in a local login manager when you need to force the local desktop away from Wayland.
Repair a session that starts without the Ubuntu layout
Sometimes GNOME starts but does not load the normal Ubuntu shell arrangement, such as the expected dock or panel. Use the following wrapper only when the standard Xorg session does not load correctly. It is based on the environment variables and session command used in Ubuntu’s xrdp procedure:
sudo tee /usr/local/bin/ubuntu-session >/dev/null <<'EOF'
#!/bin/sh
export GNOME_SHELL_SESSION_MODE=ubuntu
export DESKTOP_SESSION=ubuntu-xorg
export XDG_SESSION_DESKTOP=ubuntu-xorg
export XDG_CURRENT_DESKTOP=ubuntu:GNOME
exec /usr/bin/gnome-session --session=ubuntu
EOF
sudo chmod +x /usr/local/bin/ubuntu-sessionAfter creating it, select Session Xorg again and test with the affected user. Do not replace a working session with this wrapper simply because the file exists; it is a targeted fix for a GNOME session that starts incorrectly.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Open TCP 3389 safely
Check whether UFW is active
sudo ufw status verboseIf UFW is active, the basic Ubuntu community rule is:
sudo ufw allow 3389/tcp
sudo ufw statusThat rule permits connections from any source that can reach the host. A safer rule limits the source to a trusted subnet. Replace the example documentation subnet with your real LAN or VPN network:
sudo ufw allow from 192.0.2.0/24 to any port 3389 proto tcpFor a single management workstation, use its address instead of a whole subnet. Keep the rule as narrow as the network design allows.
Remember firewalls outside Ubuntu
A cloud security group, router ACL, hardware firewall, or VPN policy can block 3389 even when UFW allows it. Conversely, a cloud rule that exposes 3389 to the internet can defeat a restrictive local policy if traffic is being forwarded in an unexpected way. Verify both layers and test from the same network where the client will run.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallUbuntu warns that exposing an RDP port can let attackers attempt to break into the system. Prefer reaching the host through a VPN or another private, access-controlled network. If a router must forward a connection, restrict the source addresses at the router and require strong account authentication; do not treat changing the external port as a substitute for access control.
Configure certificate access and TLS
Add xrdp to the certificate group
Ubuntu’s AWS xrdp procedure adds the service account to ssl-cert, allowing xrdp to access the certificate and key used for TLS:
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
sudo usermod -a -G ssl-cert xrdp
sudo systemctl restart xrdpThe restart is important: group membership is read by a running process when it starts. Confirm the membership with:
id xrdpThe output should include ssl-cert. If it does not, check the command, then restart xrdp again.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Choose a secure security layer
The Jammy xrdp.ini manual documents these settings:
security_layer=negotiate
crypt_level=highWith security_layer=negotiate, the client and server negotiate a supported secure method. Setting security_layer=tls forces TLS. The same manual warns that the legacy standard RDP security layer is not safe from man-in-the-middle attack; do not use security_layer=rdp for an internet-exposed service.
Edit the configuration only when you need to change the security policy:
sudo nano /etc/xrdp/xrdp.iniPreserve the existing certificate and key paths unless you have deliberately installed replacement credentials. After saving a change:
Free tools Windows power users keep installed
One-click scans. No signup required.
sudo systemctl restart xrdp
sudo systemctl status xrdp --no-pagerIf a client reports a TLS or certificate error, verify that the xrdp account belongs to ssl-cert, that the configured files exist and are readable through their group permissions, and that the client supports the selected security mode.
Connect from a client
Windows
- Open Remote Desktop Connection from the Start menu.
- Enter the Ubuntu host name or IP address. Include a non-default port only if your network explicitly maps one; xrdp itself listens on TCP 3389 by default.
- Select Connect, accept the certificate prompt only when you recognize the host and trust the connection path, and enter the Ubuntu user’s credentials.
- At the xrdp login screen, choose Session Xorg before signing in.
If Windows reaches the host but immediately returns to the client, check the xrdp service and the desktop session rather than repeatedly changing the Windows display settings.
Linux with Remmina
Ubuntu documents Remmina as an RDP client available through the App Center, snap, or APT. The APT route is:
sudo apt update
sudo apt install -y remmina remmina-plugin-rdpOpen Remmina, create a new connection profile, choose the RDP protocol, enter the Ubuntu host name or address, and supply the username. Save the profile only on a device whose local users you trust; saved credentials can give access to the Ubuntu account.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Other RDP clients
Any client that supports standard RDP and the server’s selected TLS negotiation can be used. If the client offers a security setting, leave it on its negotiated or TLS mode rather than forcing legacy RDP security.
Verify the listener before troubleshooting the client
On Ubuntu, confirm that xrdp is listening:
sudo ss -ltnp | grep 3389You should see a TCP listener associated with xrdp. From a trusted client network, test reachability without logging in. On a Linux client with netcat installed:
nc -vz UBUNTU_HOST 3389Replace UBUNTU_HOST with the real host name or address. A refusal usually means the service is not listening or a local firewall is rejecting the connection; a timeout usually points to a routing, security-group, router, or VPN problem.
Fix the common xrdp failures
Authentication succeeds, then the screen is blank
The Ubuntu xrdp FAQ identifies an active local console login for the same user as a cause of a blank remote desktop. Log out of that user’s physical Ubuntu session completely, then reconnect through RDP. Do not merely lock the local screen. If another user needs the physical console, test with a separate Ubuntu account to determine whether the conflict is account-specific.
A color-profile prompt appears repeatedly
A repeated request to create a color profile is associated with a missing polkit rule in Ubuntu’s xrdp FAQ. Review the local policy requirements before adding a rule for the color-manager actions. After applying a policy change, log out of the RDP session and reconnect so the new authorization path is evaluated.
The Ubuntu dock or shell chrome is missing
Log out of the RDP session, sign in locally, and confirm that the Ubuntu Dock GNOME extension is enabled. Then retry with Session Xorg. If GNOME still starts with the wrong mode, use the targeted /usr/local/bin/ubuntu-session wrapper described earlier rather than adding arbitrary startup commands.
The client says connection refused
- Check
sudo systemctl status xrdp --no-pagerand restart the service if it is stopped. - Check
sudo ss -ltnp | grep 3389to confirm a listener. - Review
sudo ufw status verboseand any cloud security-group or router rule. - Verify that the client uses the correct host name or IP address and is on the expected LAN or VPN.
- Inspect
sudo journalctl -u xrdp -b --no-pagerfor startup or bind errors.
TLS or certificate errors appear
Confirm that id xrdp lists the ssl-cert group, restart xrdp after changing group membership, and check the certificate and key paths in /etc/xrdp/xrdp.ini. Ensure the client is not forcing an obsolete security mode. A certificate warning about an unknown identity can be normal for a locally generated certificate, but it should not be ignored when the host name or connection path is unexpected.
The desktop closes immediately after login
Check that a desktop environment is installed, that the user has a writable home directory, and that the selected session is Xorg. Review the xrdp and session logs:
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →sudo journalctl -u xrdp -b --no-pager
ls -la ~/.xsession-errors 2>/dev/nullPermission errors, a broken GNOME extension, or a command in a user startup file can terminate the session. Test with a newly created non-administrator account to separate a system-wide problem from a damaged user profile.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Operational security and maintenance
Limit who can reach 3389
Use a VPN or private network, restrict UFW to trusted source addresses, and remove broad rules that are no longer needed. Review the effective rule set with:
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
sudo ufw status numberedDelete an obsolete rule by its displayed number, checking the number immediately before removal because UFW renumbers entries after changes.
Keep Ubuntu and xrdp updated
Apply normal Jammy security updates and restart xrdp when an update or configuration change requires it:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
sudo apt update
sudo apt upgrade
sudo systemctl restart xrdpSchedule maintenance during a window when remote users can reconnect. A package upgrade can change desktop components even when the xrdp configuration itself is unchanged.
Inspect active sessions
Use systemd and login-session tools when investigating a user who cannot connect:
loginctl list-sessions
whoAn old graphical session can explain a blank screen or a session that will not start. Log out cleanly from the client whenever possible instead of terminating processes at random.
xrdp compared with Ubuntu’s built-in remote desktop
Ubuntu’s desktop documentation distinguishes newer GNOME RDP/VNC workflows from earlier releases. For Ubuntu 22.04, the practical choice is based on the desired session and graphics stack rather than a claim that one method is universally better.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems| Decision factor | xrdp on Ubuntu 22.04 | Built-in GNOME remote desktop |
|---|---|---|
| Primary purpose | Creates a remote login session through an RDP server. | Generally shares or controls an existing GNOME desktop session, depending on the desktop release and enabled protocol. |
| Session model | Useful when the remote user should log in separately from the physical console. | Best suited to reaching the desktop that is already running at the console. |
| Graphics compatibility | Commonly uses Xorg; select Session Xorg on Jammy. | Behavior depends on the GNOME and Wayland support provided by the exact Ubuntu release and configuration. |
| Network controls | Requires an RDP listener, certificate permissions, and firewall rules for TCP 3389. | Uses the controls and protocol settings exposed by GNOME’s remote-desktop panel. |
| Multiple users | Can provide separate authenticated sessions, subject to desktop and resource limits. | Usually centers on sharing an existing session rather than creating an independent login for every user. |
Stay with xrdp when the requirement is a distinct RDP login on Jammy and you can enforce private-network or VPN access. Investigate GNOME’s built-in remote desktop when the requirement is to share the currently visible console session and its release-specific Wayland support meets your needs.
Removing xrdp
If you no longer need the service, stop and disable it before removing the package:
sudo systemctl disable --now xrdp
sudo apt remove xrdpReview UFW and external firewall rules and remove any 3389 allowance that was created solely for xrdp. If you used a desktop installed only for remote access on an Ubuntu Server host, remove that desktop only after confirming that no other service depends on it.
Quick Recap
Final deployment checklist
- Ubuntu 22.04 has a working graphical desktop, or
ubuntu-desktopwas installed on Server. xrdpis installed, enabled, and shown asactive (running).- The client selects Session Xorg.
- TCP 3389 is allowed only from the intended LAN or VPN, with cloud and router policies checked.
- The
xrdpaccount belongs tossl-cert, and xrdp was restarted after that change. security_layer=negotiateorsecurity_layer=tlsis used; legacy RDP security is not selected for an exposed service.- The same user is not still logged into the physical console when testing a blank-screen failure.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
