Remote Desktop login issue

Irin Sultana 371 Reputation points
2022-11-15T23:21:35.613+00:00

HI,

I am facing with remote desktop connection.When i tried to login into server with hostanme, it's not taking. It's giving me credential error. But, i can access with ip address. Also, I can access the server from file explorer network options. I can map network drive. It's same for all of my servers for another office in different state. I can access remote desktop for all server in here CA. Please advice me!

Thank You!
Irin Sultana

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,803 questions
0 comments
Accepted answer
  1. Dave Patrick 426K Reputation points MVP
    2022-11-15T23:56:21.573+00:00

    Also try adding on domain controllers
    reg add "HKLM\SYSTEM\CurrentControlSet\services\kdc" /v KrbtgtFullPacSignature /t REG_DWORD /d 0 /f

    as documented here
    https://support.microsoft.com/en-us/topic/kb5020805-how-to-manage-kerberos-protocol-changes-related-to-cve-2022-37967-997e9acc-67c5-48e1-8d0d-190269bf4efb

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    1 person found this answer helpful.

7 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426K Reputation points MVP
    2022-11-17T22:35:18.92+00:00

    I'd check that all domain controllers have been patched fully so patch all the domain controllers as first step. Then each user will get the new improved authentication information PACs of Kerberos Ticket-Granting Tickets. (TGT) described in the KB

    https://support.microsoft.com/en-us/topic/kb5008380-authentication-updates-cve-2021-42287-9dafac11-e0d0-4cb8-959a-143bd0201041
    Adds the new PAC to users who authenticated using an Active Directory domain controller that has the November 9, 2021 or later updates installed. When authenticating, if the user has the new PAC, the PAC is validated.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    261550-image.png

    1 person found this answer helpful.
  2. Dave Patrick 426K Reputation points MVP
    2022-11-17T23:40:23.203+00:00

    I added PacRequestorEnforcement and set it 1. But still i am getting same error.

    That will no longer work because enforcement phase went into effect 10/11/2022

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    1 person found this answer helpful.
  3. Dave Patrick 426K Reputation points MVP
    2022-11-15T23:46:17.163+00:00

    You might consider removing November updates on domain controllers.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    260695-image.png

  4. Irin Sultana 1 Reputation point
    2022-11-16T16:03:13.877+00:00

    Hi Patrick,

    I added the registry. Still same issue no changes.

    Thank You!
    Irin Sultana