Configuring Remote Desktop Settings

Issue Encountered When Using APPMClient for RDP:



Troubleshooting Steps


For Workgroup (Local) Servers 


1. Disable 'Always Prompt for Password Upon Connection':

  • Open the Group Policy Editor: gpedit.msc.
  • Navigate to: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security > Always prompt for password upon connection
  • Set this policy to Disabled
  • Navigate to: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Connection Client > Do not allow passwords to be saved
  • Set this policy to Disabled
  • Reboot the server to apply the changes if needed
  • Navigate to: Computer Configuration > Administrative Templates > System > Credentials Delegation > Allow delegating saved credentials with NTLM-only server authentication
  • Set this policy to Enabled 



For Joined-Domain Servers :


1. Check Policy Status using Resultant Set of Policy (RSOP):

  • Run rsop.msc.
  • Navigate to the following paths to check the status of the policies:
    1. Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security > Always prompt for password upon connection
    2. Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Connection Client > Do not allow passwords to be saved
    3. Computer Configuration > Administrative Templates > System > Credentials Delegation > Allow delegating saved credentials with NTLM-only server authentication


2. Modify Domain Group Policy:

  • Open the Group Policy Management Console: gpmc.msc.
  • Locate the related policy.
    1. Find and set the policy 'Always prompt for password upon connection' to Disabled
    2. Find and set the policy 'Do not allow passwords to be saved' to Disabled
    3. Find and set the policy 'Allow delegating saved credentials with NTLM-only server authentication ' to Enabled


3. Force Group Policy Update:

gpupdate /force



Disclaimer:
While these steps aim to resolve common issues, it is essential to verify settings and procedures with official Microsoft documentation and support resources. Policies and configurations may vary based on specific server environments and software versions

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article