This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 57.00000000000001%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
After upgrade Windows 11 22H2 I Can't use saved credential (Windows Defender Credential Guard does not allow using saved credentials).
Before it works.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 47%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDN%3C/text%3E%3C/svg%3E)
I have the same issue. My windows 11 22H2 is up to date.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 70%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
this fixed it! thanks.
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 50%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBP%3C/text%3E%3C/svg%3E)
Works great in conjunction with fact that security teams are also making us use ridiculously long and complex password that take literally 2 minutes to type in.
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 72%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
Originally, Credential Guard was designed for Windows Enterprise and Education Edition. Pro Edition is not covered, but it is enabled by default for all as a mixed-up. This is the culprit. MS should have taken care of Windows Upgrade for Pro Edition.
I disabled Credential Guard to fix this problem. It should not affect the security level if you are using Pro Edition and 22H2 through Windows Update.
So, the fixing is :
Disabling Credential Guard can achieve through Group Policy Editor or some.
This is very easy.
Ref:
HTH
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
I tried to disable Credential Guard via GPO but still RDP is asking for credentials.
Policy has been applied, I'm not sure CG has been really disabled.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 2%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EI%3C/text%3E%3C/svg%3E)
Why bother with disabling Credentials Guard (and thus reducing overall system security) when you can execute a one-liner and successfully add the desired credentials (and it will work 😄)?
See my answer above (Feb 19, 2023) regarding how to solve this problem using the cmdkey which is available in Windows out of the box. Just one line - and your credentials will be finally saved in a way that will make Windows Remote Desktop happy.
because I'd like a company-wide fix, and MS docs seems reporting that the feature is an "addon" for Win Enterprise that I can ignore without to compromise security.
However I can confirm that your workaround works on my PC.
BTW disabling Credential Guard has created a LOT of problem on my workstation. Problem accessing DC shares (also GPO files), problem with my Yubi authentication, and a lot of instability. I reverted the setting to "enabled without UEFI".
Hi Topogigio,
Yubi authentication is 2-factor authentication. Right?
And your system is Enterprise Edition?
If so, I guess my workaround won't work.
BTW, how is the "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\LsaCfgFlags", now?
Is it 2?
And, how about "PS C:\WINDOWS\system32> (Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard).SecurityServicesRunning"?
Yubi is in passworless mode. No login, no psw, only the key to authenticate.
LsaCfgFlags currently is 2. But it was 0 before I restored via GPO the Credential Guard to stop disasters in my environment.
Win is Pro not enterprise
I took a look at the Yubico articles. It looks like you need to enable the Credential Guard. You should make sure that the configuration of Yubi and the requirements of how to work with the Windows Credential Guard are correct by yourself.
You just disabled it via GPO regardless of the Yubi configuration, didn't you?
So you have a disaster on your hands, I think.
Try a clean install if you can.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 54%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA5%3C/text%3E%3C/svg%3E)
Saving generic windows credentials works great for rdc, but if i try to start any other tools like edge or ssms i can not use the saved windows credentials...
C:\Windows\System32\runas.exe /user:domain\user /savecred "C:\Program Files (x86)\Microsoft SQL Server Management Studio 19\Common7\IDE\Ssms.exe"
C:\Windows\System32\runas.exe /savecred /user:DOMIAN\USER "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
is there any solution to that?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 92%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETW%3C/text%3E%3C/svg%3E)
AdamStefanowski,
Not sure if you've already figured this out, but there's a solution for SSMS. I used these instructions: https://dba.stackexchange.com/questions/66014/connect-to-sql-server-with-windows-authentication-in-a-different-domain
https://www.youtube.com/watch?v=WiVBPsqB9b4
UniServer:1433 (1433 is the default port, you may need a different port, especially if you are connecting to a named instance)MYDOMAIN\MYUSER)