windows 10

How to Enable Use of Saved Credentials for RDP Connection


When you are connecting to remote system using native Microsoft RDP client (mstsc.exe), you have the ability to save login credentials in order to not to enter them each time. Also there is one more important thing. If your connection is from domain computer to remote computer in a workgroup or another domain, it is impossible to use saved credential to access RDP server. Remote Desktop client refuses usage of saved credentials, each time forcing you to re-enter your password. The problem occurs in Windows Vista and higher.

You will receive the following error message:

[Start]Your Credentials did not work

Your system administrator does not allow the use of saved credentials to log on to the remote computer server_name because its identity is not fully verified. Please enter new credentials.

The logon attempt failed

[/End]

your credential did not work

The fact is that using of saved login credentials when connecting to a remote computer is forbidden by default domain policy, because there is no trust relationship between your computer and the server in a remote domain (or workgroup). However, this settings can be changed.

On the computer from which you are performing the Remote Desktop connection, press Win + R, type the following command and then click OK.

gpedit.msc

Additionally, you may need to enter an Administrator password or confirm the elevation (depending on the UAC policy).

READ ALSO  Deploy Local GPO with MDT 2013

gpedit

In the new window of Local Group Policy Editor, go to section Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation. We are interested in the policy Allow delegating default credentials with NTLM-only server authentication.

delegating default credentials

Open policy and enable it, then click Show button.

ntlm default credentials

In the new window you need to set the list of servers that are explicitly allowed the saved credential usage when connecting over RDP.

The list of allowed systems must be specified in following formats:

  • TERMSRV/remote_pc — allow to save login credentials for a specific computer
  • TERMSRV/*.theitbros.com — allow to use the saved credentials for all computers in the domain theitbros.com
  • TERMSRV/* — allow to store saved credentials for all computers, without exception.

Note. Use TERMSRV in uppercase, as in the example. If you specify a specific computer, remote_pc value must exactly match the name entered in the “Computer” field of rdp-client.

add sever credentials

Press OK to save changes and then close the Group Policy Editor. Open Command prompt and apply current Group Policy settings by running:

gpupdate /force

gupdate credentials

Now you should connect to Remote Desktop with saved credentials without providing password over and over again.

connecting rdp

So, we allowed to save the login credentials only on one particular computer using Local Group Policy. For multiple computers it will be better to create a separate domain OU and attach to it appropriate domain policy. Hope this was useful!

READ ALSO  Fixing Netflix Error n8109

You may also like:

Deploy Printers in Domain using Group Policy One of the most important features of Group Policies usage in Active Directory Domain environment is the possibility to connect a shared network print...
Deploy Local GPO with MDT 2013 Local Group Policy of computer is configured through gpedit.msc snap-in, which does not provide the possibility to export/import settings. That's why ...
Allow non-admins to install printer drivers via GP... By default domain users do not have permissions to install the printer drivers on the domain computers and their installation requires the user to hav...
RDP error: This computer can’t connect to the remo... Let's try to figure out how to fix an RDP error This computer can not connect to the remote computer, which occurring when you are trying to connect t...
Install a Self-signed certificate by using Group P... Let's review the details on how to install a certificate to your PC for domain users and how to add them to the trusted list with Group Policy. In thi...