#Use PowerShell to create an SSH tunnel for a Remote Desktop Connection (RDP) to another computer with OpenSSH-Server installed
#Just the code:
Start-Process ssh -ArgumentList "-N -L 127.0.0.3:13389:10.4.0.12:3389 10.4.0.12 -l sshuser" -Verb open (Read-Host 'Press Enter to continue...')|Out-Null &mstsc /V:127.0.0.3:13389 /prompt
#The Long Story…
#Install SSH Server on Windows 10 or Windows 2019
#Use PowerShell to open SSH in a cmd.exe window that will control the SSH tunnel.
Start-Process ssh -ArgumentList "-N -L 127.0.0.3:13389:10.4.0.12:3389 10.4.0.12 -l sshuser" -Verb open
#The commands will pause while you login to the SSH tunnel session. In this example 127.0.0.3:13889 is the tunnel entrance. 10.4.0.12:3389 is the tunnel destination and will most likely be different for you. In my case it is a Microsoft Windows Server 2019 server that I connect to from a Windows 10 Professional client.
#10.4.0.12 is the address of the SSH server and sshuser is an account on the destination machine. The account used doesn’t need additional rights beyond User rights on Windows 10 to create the tunnel but you will need additional rights to connect via RDP.
#Login to SSH tunnel
#Type in the password for sshuser
#The first time you connect to a new SSH host computer you must accept the SSH key that is presented. Type yes if prompted with a message similar to the text below.
The authenticity of host 'servername (10.04.00.02)' can't be established. ECDSA key fingerprint is SHA256:(<a large string>). Are you sure you want to continue connecting (yes/no)?
#Leave this window open. Minimize if you need to but it needs to stay running for the tunnel traffic to use.
#This will end with a window that looks like it hangs after you login. It is not hung. That window is where the tunnel runs through. Do not close it. Minimize the window and go back to your script. Press Enter to continue…
#Go back to the PowerShell window and press Enter to launch mstsc.exe and make a Remote Desktop Connection using the new SSH tunnel.
(Read-Host 'Press Enter to continue...')|Out-Null
#Launch mstsc.exe with the new loopback IP and made up port number
#Use the & call operator to force PowerShell to treat the string as a command to be executed and run mstsc.exe which is the Windows command to launch the Remote Desktop Services client also know as Microsoft Terminal Services client (mstsc).
&mstsc /V:127.0.0.3:13389 /prompt
#I used code and knowledge from the page linked below to create this but the code I use is modified to combine techniques and concepts shown there when using PowerShell.
#This site has information on using Putty and Linux to create SSH tunnel connections as well.