question

RahamimLevi-4504 avatar image
0 Votes"
RahamimLevi-4504 asked ·

Your credentials didn't work remote desktop

Hi everyone,

I want to upgrade a RDS 2008 R2 that has a remote app to 2019.
I already deployed the server, it has connection broker, publishing and web access roles installed. I also deployed group policy that delegate default and fresh credentials with concatenation enabled.
I also installed a trusted certificate from our root CA server. And, deployed the thumbprint via group policy under computer configuration as well. I also deployed the server as a trusted site and set the option to sign in automatically with current credentials.
When I use MSTSC to connect to the server, It works without credentials window.
When I go to the RDWEB page it signs in using my credentials, and when I open a remote app from RDWEB, it signs in using my credentials.
The only problem is when I want to use remoteapp and desktop connection it always says "your credentials didn't work". If I manually enter domain\username and password it does work.

Any ideas?

Thanks in advance, Rahamim.

windows-remote-desktop-serviceswindows-remote-desktop-client
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RahamimLevi-4504 avatar image
0 Votes"
RahamimLevi-4504 answered ·

Thank you @ElevenYu-MSFT for your reply.

I found 2 videos in this channel about how to configure this correctly. Apparently it is an expected behavior to get when you try to connect to a remote app manually. When I deployed the webfeed.aspx URL via GPO it worked perfectly. Thanks again


·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ElevenYu-MSFT avatar image
0 Votes"
ElevenYu-MSFT answered ·

Hi,

I also deployed group policy that delegate default and fresh credentials with concatenation enabled

  1. So, have you deployed all below group policies?

Allow delegating default credentials
Allow delegating saved credentials
Allow delegating default credentials with NTLM-only server authentication
Allow delegating saved credentials with NTLM-only server authentication

  1. Please ensure that you have specified correct user group that will access to the remote apps on both collection level and remote apps level.
    71905-image.png
    71780-image.png





Thanks,
Eleven


If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.


image.png (41.9 KiB)
image.png (69.5 KiB)
·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.