Windows 11 22H2 - Can't use saved credential

Andrzej S Ciesiński 126

After upgrade Windows 11 22H2 I Can't use saved credential (Windows Defender Credential Guard does not allow using saved credentials).
Before it works.

Renè Riedinger 1 Reputation point

2022-09-29T14:54:44.293+00:00

Same issue here!
informatik01 226 Reputation points

2022-10-05T15:57:37.54+00:00

Still this issue is present.
fabioalessandro 1 Reputation point

2022-10-05T18:11:27.04+00:00

resolve with this

Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard.

Add a new DWORD value named EnableVirtualizationBasedSecurity and set its value to 0.
Add another new DWORD value named RequirePlatformSecurityFeatures and set that to 0.

Now go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

Add a new DWORD value named LsaCfgFlags and set it to 0.

Restart your computer.
David Nelson 136 Reputation points

2022-10-06T00:35:11.013+00:00

I have the same issue. My windows 11 22H2 is up to date.
Levan Kekelidze 6 Reputation points

2022-10-06T01:47:25.877+00:00

Thank you for the information.

Still would be nice to see the related official fix from Microsoft as well.
Renè Riedinger 1 Reputation point

2022-10-06T04:29:18.847+00:00

But why is this feature enabled in Win 11 Pro?
I'm using the Pro version and I have exactly the same behavior/issue
Br
Paweł Mikołajczyk 1 Reputation point

2022-10-06T07:25:49.823+00:00

This same problem win 11 pro ...
Paweł Mikołajczyk 1 Reputation point

2022-10-06T07:27:29.593+00:00

I'm using 11 Pro and have this same problem...
Bcdude 1 Reputation point

2022-10-06T17:24:11.877+00:00

I can’t save credentials for Remote Desktop. I was using streamdeck to automatically sign me in to two different rdp. Now it’s not working. I don’t want to change registry because that could cause other issues since I am not trained in this type of stuff . So what do I do? Switch to a different rdp provider? Or will windows be fixing this soon? I’m on win11 pro latest release .
David Nelson 136 Reputation points

2022-10-06T19:30:09.277+00:00

It seems to be part of Microsoft's efforts to make Windows more secure by default. You can read about is here:
https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-how-it-works

Microsoft clarified how to turn it off in the case where it was turned on by the Windows 11 22H2 update (see above my recent post) with a simple group policy change.
AdamStefanowski-5825 0 Reputation points

2023-11-06T01:30:26.1366667+00:00

Saving generic windows credentials works great for rdc, but if i try to start any other tools like edge or ssms i can not use the saved windows credentials...

C:\Windows\System32\runas.exe /user:domain\user /savecred "C:\Program Files (x86)\Microsoft SQL Server Management Studio 19\Common7\IDE\Ssms.exe"

C:\Windows\System32\runas.exe /savecred /user:DOMIAN\USER "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"

is there any solution to that?
Bob Pants 261 Reputation points

2024-04-18T01:14:08.4466667+00:00

Works great in conjunction with fact that security teams are also making us use ridiculously long and complex password that take literally 2 minutes to type in.
Tim Weber 0 Reputation points

2024-04-25T15:46:50.85+00:00
AdamStefanowski,

Not sure if you've already figured this out, but there's a solution for SSMS. I used these instructions: https://dba.stackexchange.com/questions/66014/connect-to-sql-server-with-windows-authentication-in-a-different-domain

https://www.youtube.com/watch?v=WiVBPsqB9b4

Open Credential Manager

Click "Add A Windows Credential"

Populate the "internet or network address" field with the name and port number of the SQL instance you wish to store credentials for. Example: UniServer:1433 (1433 is the default port, you may need a different port, especially if you are connecting to a named instance)

Populate the "User Name" (don't forget to include the domain e.g. MYDOMAIN\MYUSER)

Populate the "Password"

Click OK
KTC_Church 21 Reputation points

2024-05-10T22:34:35.07+00:00

this fixed it! thanks.
Mike S 0 Reputation points

2025-03-19T12:22:14.52+00:00

I wish I'd seen this thread sooner! It may seem like a small thing, but constantly typing in credentials can get really irritating. I’ve been looking for an answer to this for ages and even started using HelpWire as a free alternative to Windows Remote. Turns out, it’s all so simple

24 answers

Andrzej S Ciesiński 126 Reputation points

2022-09-26T07:37:09.73+00:00

A cumullative update to 22H2 was released today.
After its installation, the system clearly interpreted the saved passwords differently. After deleting them and rewriting, everything returned to normal.
So, problem was in 22H2.
Please sign in to rate this answer.
Dr. Strangelove 6 Reputation points

2022-09-28T22:09:48.307+00:00

What is the KB number of this update? I have seen the update.

Doc

Dr. Strangelove 6 Reputation points

2022-09-28T22:13:40.283+00:00

What is the KB number of this update? I have not seen the update.

Doc

Dawid Johansson 16 Reputation points

2022-09-29T07:55:18.727+00:00

Hi, could you please elaborate? i deleted my rdp shortcuts, also did edit in the rdp, but still it doesn't work...

zpmarcos 11 Reputation points

2022-09-29T08:38:21.207+00:00

I have the same issue!
Cant remember password... Always get login error!
I have to type it everytime I want to connect through RDP.
This is a Windows 11 22H2 bug!

Andrzej S Ciesiński 126 Reputation points

2022-09-30T10:28:18.37+00:00

Idon't know what was the KB number (it was cumullative update, so I don't know which part changed mstsc behavior).
But,
I was happy only 1 day:(
After turn off my PC at night, all the Microsoft demons was back.
Now, again, I have to write password all the time!
Due to the passwords to my client are difficult and I have to wite it many times, save etc., it is more dangerous that before.
So MIcrosoft give my back my credential policy!!!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Dr. Strangelove 6 Reputation points

2022-10-01T16:38:45.34+00:00
KB5017389 seems to have corrected the problem.
https://support.microsoft.com/en-us/topic/september-30-2022-kb5017389-os-build-22621-608-preview-62f353a0-696a-49d8-a78f-a14910f30ae3

The only thing I see in the release notes is this:

Addresses an issue that causes LogonUI.exe to stop working. Because of this, you cannot dismiss the lock screen to view the credentials screen.

All seems ok now.

Doc
Please sign in to rate this answer.
Dawid Johansson 16 Reputation points

2022-10-02T10:53:10.383+00:00

For me its still the same, it asks for the credentials even though i use edit or delete the connection.
When asked if i anser yes to i want to remember and save the credentials.... it still asks for it...

Peter Cooke 1 Reputation point

2022-10-02T13:04:16.83+00:00

Me to. The latest patch still won't save my password. This worked for me.
Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard.

Add a new DWORD value named EnableVirtualizationBasedSecurity and set its value to 0.
Add another new DWORD value named RequirePlatformSecurityFeatures and set that to 0.

Now go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

Add a new DWORD value named LsaCfgFlags and set it to 0.

fabioalessandro 1 Reputation point

2022-10-04T10:33:07.607+00:00

perfect I followed your advice the first time he asked me for the password all the following he entered directly without typing the password
perfetto ho seguito il tuo consiglio la prima volta mi ha chiesto la password tutte le successive è entrrato direttamente senza digitare la password

fabioalessandro 1 Reputation point

2022-10-04T10:34:03.217+00:00

perfect I followed your advice the first time he asked me for the password all the following he entered directly without typing the password
perfetto ho seguito il tuo consiglio la prima volta mi ha chiesto la password tutte le successive è entrrato direttamente senza digitare la password
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
andy 1 Reputation point

2022-10-02T19:40:32.277+00:00
Today I installed next updates:

2022-09 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5017389)

2022-09 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 for x64 (KB5017271)
After that I unchecked "Always ask for credentials" as an effect of that updates (I didn't check this before).

After several tries (Windows 11 didn't want save my choices:)) finally "using of saved credentials" works.
Just in case I restarted PC several times to check how permanently is this solution.
All works fine.
So, that's next prove that my problem was absolutely the result of Windows update 22H2.

In the meantime I tries change settings in gpedit.msc to check can they help me.
"Allow delegating default credentials with NTLM-only server authentication Enabled No
Allow delegating default credentials Enabled No
Allow delegating fresh credentials Enabled No
Allow delegating fresh credentials with NTLM-only server authentication Enabled No
Remote host allows delegation of non-exportable credentials Enabled No
Allow delegating saved credentials Enabled No
Allow delegating saved credentials with NTLM-only server authentication Enabled No
"
I don't have time now to check which of the settings may be related to my problem.
I leave it as it is while it works.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
David Nelson 136 Reputation points

2022-10-06T02:07:30.587+00:00

The link says "Starting with Windows 11 Enterprise 22H2, compatible systems have Windows Defender Credential Guard turned on by default. This changes the default state of the feature in Windows, though system administrators can still modify this enablement state. Windows Defender Credential Guard can still be manually enabled or disabled via the methods documented below.":
https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

It seems this issue is not going to be "fixed". It is a purposeful change to improve security and you must turn it off if you don't like it.

These also looked interesting:
https://learn.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard
https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-how-it-works
Please sign in to rate this answer.
Levan Kekelidze 6 Reputation points

2022-10-06T05:06:22.147+00:00

Thanks for this important information.

Still it is really not user friendly from Microsoft to make such a surprise for its customers.
How come nobody hasn't foreseen such situation in regards to Remote Desktop usage?

This new changes essentially broke the "Save the credentials" option and made it literally useless.
They could at least provide some info messages beside this option or something like that.

Plus disabling this now-default setting was not made user friendly at all: all those group policy and registry manipulations...

David Nelson 136 Reputation points

2022-10-06T19:22:32.827+00:00

Thie documentation was updated today. Looks to be clearer.

The documentation now says: "Windows Defender Credential Guard can be disabled via several methods explained below, depending on how the feature was enabled. For devices that had Windows Defender Credential Guard automatically enabled in the 22H2 update and did not have it enabled prior to the update, it is sufficient to disable via Group Policy."

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

Levan Kekelidze 6 Reputation points

2022-10-06T19:33:39.91+00:00

The fact itself that in order to achieve the desired effect we still need
to perform multiple steps including changing/removing specific keys in the registry - all this definitely does not provide premium experience.

Why there is no dedicated UI control in Windows Security Center (Windows Defender), some toggle or something like that?
It's sad that Microsoft didn't care about that.

I am not even saying that users now need to google for the solution to this problem etc.

But thank you for the additional info.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
fabioalessandro 1 Reputation point

2022-10-06T09:36:25.413+00:00

guys this is the solution
I also have 11 pro 22h2 with this method I have definitely solved
no longer asks for the password

win+r then regedit
after
go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard.

add a new DWORD value named EnableVirtualizationBasedSecurity and set its value to 0.
add another new DWORD value named RequirePlatformSecurityFeatures and set that to 0.

now go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

add a new DWORD value named LsaCfgFlags and set it to 0.

very simple
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Windows 11 22H2 - Can't use saved credential

24 answers

Your answer