question

PawanKumar-0114 avatar image
0 Votes"
PawanKumar-0114 asked AndyWoutersimec-7419 commented

RDS 2019 SSO with Credential Guard enabled

Hi Guys,

I have setup RDS Farm and configured SSO using GPO as per available articles. It works great internally with IE.
When i turn Enable Credential Guard, it break SSO and Remote App ask for password.
I understand that When Windows Defender Credential Guard is enabled, Kerberos does not allow unconstrained Kerberos delegation or DES encryption, not only for signed-in credentials, but also prompted or saved credentials.

Can RDS SSO be achieved using Kerberos constrained delegation or Resource-based constrained delegation with Credential Guard enabled?
If yes, how to configure it for all RDS users?
I have tried Resource-based constrained delegation by allowing my test client but still doesn't work.

Has anyone implemented this successfully?

remote-desktop-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Jingruihan-MSFT avatar image
1 Vote"
Jingruihan-MSFT answered AndyWoutersimec-7419 commented

Hi, I am doing some research for current issue, thanks for your waiting.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for looking in to this. Let me know if it is possible to get SSO with Credential Guard.

0 Votes 0 ·

Hi, just wondering if you have any update or info about this?

0 Votes 0 ·

Sorry, not yet.

0 Votes 0 ·

Hi, Is there any update on this? Are you still checking this or is it fallen from your radar?

0 Votes 0 ·

Any updates? I am struggling with the same issue after enabling credential guard.

kind regards

0 Votes 0 ·