Share via

Remote Desktop login issue

Irin Sultana 377 Reputation points
2022-11-15T23:21:35.613+00:00

HI,

I am facing with remote desktop connection.When i tried to login into server with hostanme, it's not taking. It's giving me credential error. But, i can access with ip address. Also, I can access the server from file explorer network options. I can map network drive. It's same for all of my servers for another office in different state. I can access remote desktop for all server in here CA. Please advice me!

Thank You!
Irin Sultana

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
0 comments

Answer accepted by question author

  1. Anonymous
    2022-11-15T23:56:21.573+00:00

    Also try adding on domain controllers
    reg add "HKLM\SYSTEM\CurrentControlSet\services\kdc" /v KrbtgtFullPacSignature /t REG_DWORD /d 0 /f

    as documented here
    https://support.microsoft.com/en-us/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    Was this answer helpful?

    1 person found this answer helpful.

7 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-11-17T23:40:23.203+00:00

    I added PacRequestorEnforcement and set it 1. But still i am getting same error.

    That will no longer work because enforcement phase went into effect 10/11/2022

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    Was this answer helpful?

    1 person found this answer helpful.
  2. Anonymous
    2022-11-17T22:35:18.92+00:00

    I'd check that all domain controllers have been patched fully so patch all the domain controllers as first step. Then each user will get the new improved authentication information PACs of Kerberos Ticket-Granting Tickets. (TGT) described in the KB

    https://support.microsoft.com/en-us/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041
    Adds the new PAC to users who authenticated using an Active Directory domain controller that has the November 9, 2021 or later updates installed. When authenticating, if the user has the new PAC, the PAC is validated.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    261550-image.png

    Was this answer helpful?

    1 person found this answer helpful.
  3. Irin Sultana 377 Reputation points
    2022-11-16T16:03:13.877+00:00

    Hi Patrick,

    I added the registry. Still same issue no changes.

    Thank You!
    Irin Sultana

    Was this answer helpful?

  4. Anonymous
    2022-11-15T23:46:17.163+00:00

    You might consider removing November updates on domain controllers.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    260695-image.png

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.