How do i enable "Require user authentication for remote connections by using Network Level Authentication’ from intune i want my local group policy to have this policy enabled and not be "not configured"

Question

How do i enable "Require user authentication for remote connections by using Network Level Authentication’ from intune i want my local group policy to have this policy enabled and not be "not configured"

IT Reveal 1

How do I enable "Require user authentication for remote connections by using Network Level Authentication’ from Intune I want my local group policy to have this policy enabled and not be "not configured"

This setting is current on "Not Configured" with this setting "Require user authentication for remote connections by using Network Level Authentication’ is enabled but users can still change it I need a way to set this local group policy to enable from Intune.

0 comments

3 answers

Your answer

Answer 1

Lu Dai-MSFT 28,531

@IT Reveal Based on my research, this policy is supported on windows 10 pro devices.
https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-remotedesktopservices#remotedesktopservices-allowuserstoconnectremotely

Honestly, there is no windows 10 pro device in my lab. I have done the test in my windows 10 enterprise device. I configured the setting in Administrative template profile and deploy it to my device group. It deployed successfully.

And I also checked the registry value, it is added.

There are some methods can change the settings, such as via intune and via GPO. We can configure the settings via intune, but it doesn't mean the same setting will be configured in GPO. Either methods, the end goal is to modify the registry.

Hope it will help.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

IT Reveal 1 Reputation point

2022-03-14T20:52:22.927+00:00

For me using that Administrative template does not work with Windows Pro. However manually adding the UseAuthentication registry seem to work. I might have to create a script that can add that registry and apply it through Intune
Jason Sandys 31,421 Reputation points Microsoft Employee Moderator

2022-03-14T21:21:27.867+00:00

No commitment (since this isn't something I can commit to personally) but we should be enabling the ability to use the Settings Catalog on Windows Pro "soon".

Answer 2

Jason Sandys 31,421 Microsoft Employee Moderator

Are your managed devices running Windows Pro? If so, then Settings Catalog settings are only supported for Windows Enterprise.

IT Reveal 1 Reputation point

2022-03-11T16:27:46.08+00:00

Yes they're running Windows Pro. Is there another way I can enable NLA while running Windows Pro
Jason Sandys 31,421 Reputation points Microsoft Employee Moderator

2022-03-11T18:36:30.637+00:00

Not via Intune today to my knowledge. I know we were investigating opening up the Settings Catalog to Windows Pro but I don't think that's happened.

You can directly set the corresponding registry value using a script.
IT Reveal 1 Reputation point

2022-03-11T21:22:49.693+00:00

The issue with that is both corresponding registry values (SecurityLayer & UserAuthentication ) are already set with correct values but the the Local group policy is set to Not Configured which means users can still turn-off this setting. I would like to set the "Require user authentication for remote connections by using Network Level Authentication" policy to enable instead of Not configured
Jason Sandys 31,421 Reputation points Microsoft Employee Moderator

2022-03-14T15:37:08.293+00:00

Then, until or unless we change Settings Catalog to allow control over Pro devices, your only option here is to upgrade the device to Enterprise. This is a simple SKU change on the device and does not require anything more than a reboot (in addition to purchasing the necessary licensing).

Answer 3

Jason Sandys 31,421 Microsoft Employee Moderator

Use the Settings Catalog. This, along with (nearly) all other settings contained within the built-int AMDXs are configurable using the Settings Catalog.

IT Reveal 1 Reputation point

2022-03-10T22:38:34.89+00:00

I've tried Settings Catalog and Administrative Templates but the policy is not pushed successfully it rather says not applicable

Share via

How do i enable "Require user authentication for remote connections by using Network Level Authentication’ from intune i want my local group policy to have this policy enabled and not be "not configured"

3 answers

Your answer