Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallTo use a graphical desktop on an Ubuntu VPS, install a desktop environment first, then install and configure xrdp, open TCP port 3389, and connect with an RDP client. The most practical lightweight combination for Ubuntu 24.04 is XFCE with xrdp. Keep SSH enabled throughout setup so you can recover the server if the graphical login fails.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
This guide covers the complete installation, firewall and cloud-network rules, first connection, security choices, and fixes for timeouts, certificate errors, login loops, and black screens.
As an Amazon Associate I earn from qualifying purchases.
Free tools Windows power users keep installed
One-click scans. No signup required.
What xrdp does on an Ubuntu VPS
xrdp is an RDP server: it accepts Remote Desktop Protocol connections and creates a graphical Linux session for an authenticated local user. A minimal VPS image normally has no desktop environment, so installing xrdp alone is not enough. XFCE supplies the desktop; xrdp supplies the remote-session protocol.
The setup described here targets Ubuntu 24.04 (Noble), including cloud virtual machines. Package names and desktop-session behavior can differ on other Ubuntu releases. The Ubuntu Noble manpage identifies /etc/xrdp/xrdp.ini as the main configuration file and /var/log/xrdp.log as the primary xrdp log. Its displayed package version is 0.9.24-4ubuntu0.1; that is a version-specific package record, not a promise that every release has the same build.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Before you install anything
Keep SSH as your recovery channel
Use SSH to reach the VPS before changing the graphical stack. Do not close your existing SSH session until an RDP login has succeeded. If xrdp will not start, the firewall blocks you, or XFCE produces a blank screen, SSH gives you a way to inspect logs and undo the change.
Use a normal Linux account with a password
RDP should authenticate a regular local Linux account. An SSH key accepted by the cloud provider does not, by itself, provide a password for xrdp. Sign in as the user who owns the desktop session and make sure that account has a password. Avoid using the root account for a graphical login.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteRecord the two network controls
There are usually two independent filters between an RDP client and the service:
- The VPS provider’s security group, firewall rule, or network ACL must permit inbound TCP 3389.
- The Ubuntu guest firewall must permit the same traffic if UFW is enabled.
Allow the port only from the addresses that need access. A port opened in the provider console but denied by UFW still produces a timeout, and a UFW rule cannot help if the provider-level rule drops the packet first.
Install XFCE and xrdp on Ubuntu 24.04
Run the following through SSH:
sudo apt update
sudo apt install xfce4 xfce4-session xrdp
sudo systemctl enable xrdpapt update refreshes package metadata. The install command adds the XFCE desktop, its session package, and the xrdp server. systemctl enable xrdp configures the service to start when the VPS boots. Enabling a service does not replace the restart required after session configuration, so complete the remaining steps before testing.
Check the Ubuntu 24 certificate-group requirement
On Ubuntu 24, the documented procedure calls for adding the xrdp service account to the certificate group when the installed package requires certificate access:
sudo adduser xrdp ssl-certIf you encounter certificate or startup errors, verify that this membership is present, then restart xrdp. Group membership changes affect the service only after it is restarted.
Configure XFCE as the RDP session
Run the next command as the Linux user who will sign in through RDP, not as an unrelated administrative account:
echo xfce4-session >~/.xsession
sudo systemctl restart xrdpThe .xsession file tells xrdp to launch XFCE for that user’s session. The restart reloads the service and applies the setting. If several users will connect, each user needs an appropriate session file in their own home directory.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Ownership matters here: placing the file in an administrator’s home directory does not configure another user’s login. Create or replace it while logged in as the intended desktop user. If you later switch desktop environments, update that user’s session selection and restart xrdp before testing again.
Recommended Free Tools
Open TCP 3389 safely
Provider security rule
In the VPS provider’s network-security interface, add an inbound rule for TCP 3389. Set the source to your office, home, or VPN address range whenever the interface supports source restrictions. Do not use an unrestricted Internet source unless you have a specific reason and compensating controls.
UFW on the Ubuntu guest
Ubuntu’s remote-desktop documentation shows this broad rule for its documented modes:
sudo ufw allow 3389:3390/tcp
sudo ufw reloadThat range covers both 3389 and 3390. An xrdp-only VPS normally needs just 3389, so a narrower source-restricted rule is preferable:
sudo ufw allow from <trusted-source-ip> to any port 3389 proto tcp
sudo ufw reloadReplace <trusted-source-ip> with the address or network that should connect. If your source address changes frequently, update the rule rather than leaving the service broadly exposed. Confirm that the provider rule and UFW rule describe the same port and protocol.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Port 3390 is not automatically required by xrdp. Ubuntu’s 3389–3390 example covers its documented GNOME remote-desktop modes; an installation using only xrdp should expose only the listener it actually uses. Opening an extra port widens the attack surface and can make later troubleshooting confusing when two remote-desktop approaches are installed together.
Connect from Windows or Linux
Windows
- Open Remote Desktop Connection (the
mstscapplication) or install a Microsoft Remote Desktop client supported by your Windows edition. - Enter the VPS’s public IP address or DNS name as the computer.
- Start the connection and accept the identity prompt only when the address is the server you intended to reach.
- At the xrdp login screen, select the default Xorg session when that choice is offered.
- Enter the Linux username and its password. These are the credentials of the local Ubuntu account, not necessarily the credentials used by your VPS control panel.
Ubuntu and other systems
Remmina is an option on Ubuntu. Other RDP clients can work if they support the protocol features used by xrdp. Client labels differ by operating system, but the required connection information is the same: the VPS address, TCP 3389, and the local Linux account’s credentials.
What a successful first login looks like
A successful connection reaches an XFCE desktop rather than an SSH shell. The first session can take longer while desktop files are created. Test a terminal, open a file manager, and sign out from the desktop menu before closing the RDP client; this confirms that the session starts and exits normally.
Signing out from XFCE is preferable to simply closing the client window during the first test. It verifies that the desktop can terminate cleanly and gives you a clear baseline for distinguishing a session problem from a client-network problem.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
Diagnose failures in the order they occur
1. The client times out or says the connection was refused
Work from the outside inward:
- Confirm that the client is using the VPS’s current public IP address.
- Check the provider security group or network ACL for inbound TCP 3389.
- Check whether UFW is active and whether it permits TCP 3389 from your source.
- Verify that the xrdp service is running after installation and restart it if necessary.
- Use the server’s SSH session to inspect whether a local service is listening on the expected port.
A timeout usually means a dropped packet somewhere in the network path. A refusal generally means the address is reachable but no service is accepting the connection, or a firewall is actively rejecting it. Both symptoms require checking the provider rule, guest firewall, address, and service rather than repeatedly retrying the client.
Check one layer at a time and retest after each correction. If the provider rule is wrong, changing XFCE will not help; if the service is stopped, adding more firewall rules will not make a connection succeed. Keeping the SSH window open prevents a firewall change from locking you out while you test.
2. The login returns to the client immediately
This commonly indicates that the desktop session did not start. Confirm all three of these conditions:
- XFCE and
xfce4-sessionare installed. ~/.xsessionbelongs to the user who is logging in and containsxfce4-session.- xrdp has been restarted since the file was created or changed.
Then inspect /var/log/xrdp.log and the relevant settings in /etc/xrdp/xrdp.ini. The log identifies whether the failure occurs during authentication, display startup, or session teardown.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
3. The session shows a black or blank screen
Start with the same XFCE checks rather than installing a second desktop environment. A minimal server may have xrdp but no usable desktop session. Re-run the package installation if XFCE is incomplete, recreate ~/.xsession as the logging-in user, and restart xrdp. Review /var/log/xrdp.log for the first error recorded during the failed login.
Also make sure an old graphical session is not being reused by a different account. Test with the intended regular user and the default Xorg option at the xrdp login screen.
4. Ubuntu 24 reports certificate or startup errors
Check whether xrdp is a member of ssl-cert:
sudo adduser xrdp ssl-cert
sudo systemctl restart xrdpIf the account was already a member, inspect the service log and /etc/xrdp/xrdp.ini instead of adding duplicate groups. The certificate-group step is specifically relevant to Ubuntu 24 package behavior; other releases may present different messages.
5. The desktop works but feels slow
RDP traffic crosses the Internet, so input latency depends on the network path, available bandwidth, and physical distance to the VPS datacenter. A responsive SSH shell does not guarantee a responsive graphical desktop because the GUI continuously transfers drawing and input data. Choose a VPS region close to the people using it, reduce unnecessary desktop effects, and avoid treating RDP as a substitute for a local workstation when the network path is long or unstable.
Security hardening for an Internet-facing RDP service
- Restrict the source: permit TCP 3389 only from known office, home, or VPN ranges in both the provider rule and UFW.
- Use a non-root account: authenticate the desktop with a normal Linux user and elevate with
sudoonly when needed. - Keep SSH available: retain SSH as the emergency administration path and do not remove it until RDP has been tested.
- Use a strong local password: an SSH key does not replace the password required by the xrdp login screen.
- Review logs: repeated failures in
/var/log/xrdp.logcan reveal credential attacks or configuration mistakes. - Expose only required ports: xrdp needs TCP 3389; opening the 3389–3390 range is broader than necessary for an xrdp-only installation.
Changing the external port alone does not remove the need for source restrictions and a properly configured guest firewall. The important control is limiting who can reach the service.
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Choosing between SSH, XFCE with xrdp, and GNOME remote desktop
The right option depends on whether you need a graphical application or merely server administration.
| Approach | Desktop required | Client experience | Resource and exposure considerations | Best fit |
|---|---|---|---|---|
| Headless SSH | No | Terminal only | Smallest software footprint; uses SSH rather than an RDP listener | Package management, services, scripts, and routine administration |
| XFCE plus xrdp | Yes, XFCE and session packages | RDP clients such as Windows Remote Desktop or Remmina | Requires TCP 3389 and a desktop installation; XFCE is a lightweight choice for a VPS | Running GUI tools while retaining broad RDP client compatibility |
| Ubuntu GNOME Remote Desktop | Yes, GNOME | Ubuntu documents separate Desktop Sharing and Remote Login modes | Uses Ubuntu’s built-in GNOME remote-desktop workflow; exact port and mode depend on the selected configuration | Users who specifically need a GNOME session and its documented sharing modes |
xrdp is an independent RDP server, while Ubuntu’s GNOME documentation describes Desktop Sharing and Remote Login as separate modes. Do not configure both blindly on the same port; decide which service should answer the RDP connection and apply that service’s instructions.
XFCE is a practical choice when the VPS starts from a minimal image because it supplies a complete graphical session without requiring the full GNOME workflow. GNOME can be preferable when an application or user specifically depends on that desktop, but its sharing and login modes have different behavior and network requirements. SSH remains the simplest choice when every task can be completed in a terminal.
Useful files and commands at a glance
| Purpose | Command or path | Why it matters |
|---|---|---|
| Refresh package metadata | sudo apt update |
Ensures package installation uses current repository metadata. |
| Install the desktop and server | sudo apt install xfce4 xfce4-session xrdp |
Provides XFCE and the xrdp service. |
| Enable service at boot | sudo systemctl enable xrdp |
Starts xrdp automatically after a reboot. |
| Apply session selection | echo xfce4-session >~/.xsession |
Selects XFCE for the current user’s RDP login. |
| Reload the service | sudo systemctl restart xrdp |
Applies session and group changes. |
| Certificate access | sudo adduser xrdp ssl-cert |
Addresses the Ubuntu 24 certificate-group requirement when applicable. |
| Guest firewall | sudo ufw allow from <trusted-source-ip> to any port 3389 proto tcp |
Allows only a specified source to reach xrdp. |
| xrdp configuration | /etc/xrdp/xrdp.ini |
Main service configuration file. |
| xrdp log | /var/log/xrdp.log |
Primary log for startup and connection diagnostics. |
When this setup is the wrong tool
If you only need to administer packages, inspect services, or run scripts, SSH avoids installing a desktop and avoids exposing an RDP endpoint. If you need a full GNOME workflow, Ubuntu’s GNOME Remote Desktop modes may be more appropriate than adding XFCE. If the VPS is far from the users or the workload is graphics-intensive, Internet latency can make any remote desktop frustrating; a nearer region or a local workstation may be a better operational choice.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Frequently asked questions
How do I install xrdp on an Ubuntu VPS?
Connect over SSH, run sudo apt update, then install xfce4 xfce4-session xrdp. Enable the service with sudo systemctl enable xrdp, add xrdp to ssl-cert when Ubuntu 24 requires it, create ~/.xsession containing xfce4-session, and restart xrdp.
Do I need to install a GUI before xrdp?
Yes. A minimal Ubuntu VPS normally has no desktop environment. xrdp provides the RDP server, while XFCE provides the graphical session that appears after login.
What port does Ubuntu RDP use?
For this xrdp setup, use TCP port 3389. Permit it in both the VPS provider’s security rule and UFW if UFW is active. Ubuntu’s broader 3389–3390 example also covers documented GNOME remote-desktop modes, but an xrdp-only server generally needs only 3389.
How do I connect from Windows Remote Desktop?
Open mstsc, enter the VPS public IP address or DNS name, choose the default Xorg session at the xrdp prompt, and authenticate with the regular Ubuntu user’s username and password. An SSH key or cloud-control-panel password is not automatically the xrdp password.
Why is my xrdp login screen black or blank?
Verify that XFCE and xfce4-session are installed, that the logging-in user owns ~/.xsession, and that the file contains xfce4-session. Restart xrdp, select the default Xorg session, and inspect /var/log/xrdp.log for the first startup error.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Why does xrdp send me back to the client after login?
The desktop session likely failed to start. Check the same XFCE and .xsession conditions, then review the log and /etc/xrdp/xrdp.ini. Make sure you are testing with the intended regular user rather than an account that has no session configuration.
Can I use an SSH key to log in through xrdp?
The documented workflow uses a regular local Linux account and its password. An SSH key can get you into the server for setup, but it does not by itself provide the password that the xrdp login screen requests.
Should I expose port 3389 to the entire Internet?
No, not when it can be avoided. Restrict the source to a trusted home, office, or VPN address in both the provider rule and UFW. Exposing only the required port and keeping a strong local password reduces unnecessary exposure.
Is xrdp better than SSH?
Use SSH for terminal administration, scripts, packages, and services because it has the smallest software footprint and no RDP listener. Use XFCE with xrdp when you specifically need graphical applications. Choose GNOME Remote Desktop when you need Ubuntu’s GNOME desktop and its documented Desktop Sharing or Remote Login modes.
Why is the remote desktop slow even though SSH feels fast?
RDP continuously transfers graphical updates and input, so latency is affected by bandwidth, distance to the VPS datacenter, and the stability of the Internet path. A nearby region and a lightweight desktop help, but a graphics-heavy workload may still be better on a local workstation.
Final verification checklist
- SSH access still works.
- A regular Linux user has a password.
- XFCE,
xfce4-session, and xrdp are installed. xrdpis enabled and has been restarted.- The Ubuntu 24
ssl-certmembership step has been applied if required. - The provider network rule permits TCP 3389 from the intended source.
- UFW permits TCP 3389 from the same source when UFW is active.
- The user’s home directory contains
~/.xsessionselecting XFCE. - The client connects to the current VPS address and uses the default Xorg session.
- Failures are checked in
/var/log/xrdp.logand/etc/xrdp/xrdp.ini.
Frequently Asked Questions
How do I install xrdp on an Ubuntu VPS?
Connect over SSH, install XFCE, xfce4-session, and xrdp with apt, enable xrdp, configure the user’s .xsession file, and restart the service.
What port does Ubuntu RDP use?
This xrdp setup uses TCP 3389. Permit it in the provider firewall and UFW, restricting the source whenever possible.
How do I connect from Windows Remote Desktop?
Open mstsc, enter the VPS address, select the default Xorg session at the xrdp prompt, and use the regular Ubuntu account’s password.
Why does xrdp show a black screen?
Check XFCE installation, the logging-in user’s ~/.xsession file, the default Xorg option, and /var/log/xrdp.log, then restart xrdp.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Can an SSH key authenticate an xrdp login?
No. The SSH key gets you into the server for setup; xrdp requires the local Linux user’s password.
Should port 3389 be open to everyone?
Prefer a provider and UFW rule restricted to trusted home, office, or VPN addresses.
The Bottom Line
For a lightweight Ubuntu 24.04 VPS desktop, install XFCE and xrdp, select XFCE with ~/.xsession, restart the service, and allow TCP 3389 only from trusted sources. Keep SSH available, use a regular password-authenticated Linux account, and consult /var/log/xrdp.log when a connection or graphical session fails.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
