diff --git a/install-rustdesk.bat b/install-rustdesk.bat
index 07eb88b..aaa0ec0 100644
--- a/install-rustdesk.bat
+++ b/install-rustdesk.bat
@@ -1,5 +1,8 @@
 @echo off
 
+echo Erstelle TMP-Ordner...
+if not exist "C:\TMP" mkdir "C:\TMP" >nul 2>&1
+
 echo Deaktiviere und loesche pcvisit / caloa Dienste...
 :: Sucht nun nach pcvisit UND caloa Diensten, stoppt und loescht sie
 powershell -Command "Get-Service -Name '*pcvisit*', '*caloa*' -ErrorAction SilentlyContinue | ForEach-Object { Stop-Service -Name $_.Name -Force -ErrorAction SilentlyContinue; Set-Service -Name $_.Name -StartupType Disabled -ErrorAction SilentlyContinue; sc.exe delete $_.Name }" >nul 2>&1
@@ -23,7 +26,8 @@ rmdir /S /Q "%ProgramFiles(x86)%\pcvisit Software AG" >nul 2>&1
 rmdir /S /Q "%ProgramFiles%\pcvisit Software AG" >nul 2>&1
 
 echo Lade RustDesk herunter...
-powershell -Command "$ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri 'https://me-files.vmd55888.de/me-rustdesk-host.exe' -OutFile 'C:\TMP\rustdesk_installer.exe' -UseBasicParsing"
+:: WICHTIG FUER SERVER 2016: Hier wird explizit TLS 1.2 (SecurityProtocolType 3072) erzwungen!
+powershell -Command "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; $ProgressPreference = 'SilentlyContinue'; Invoke-WebRequest -Uri 'https://me-files.vmd55888.de/me-rustdesk-host.exe' -OutFile 'C:\TMP\rustdesk_installer.exe' -UseBasicParsing"
 
 :: 2 Sekunden warten (Ping-Trick)
 ping 127.0.0.1 -n 3 >nul