Consider using TLS encryption instead of the default RDP encryption, but
do make sure to test all possible clients, and mind client bugs. TLS has
been tested with Microsoft Remote Desktop in Windows 7 and above,
rdesktop 1.8 and freerdp 1.1 (Remmina, et al).

If the Xorg server does not start, you may need to install the
xserver-xorg-legacy package (if you're not using systemd's or
consolekit's privilege mechanism, or not using Linux), and/or set
"allowed_users=anybody" in /etc/X11/Xwrapper.config to allow users, once
they are logged in through xrdp, to start their own X server. Please
note that xserver-xorg-legacy may cause its own issues, so keep an eye
on Xorg being suid root and the like.

The pulseaudio plugin from sesman/chansrv/pulse should be installed but
cannot be built due to lack of a pulseaudio-modules-dev package in
Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794692

We currently do not use --enable-xrdpvr (as FFmpeg in squeeze is the
last supported version, but it may be possible to use the one in
stretch/sid).