RDP Gateway: User did not meet connection authorization policy requirements and was therefore not authorized to access the RD Gateway server.

Question

Hello,

I'm a little confused and don't understand why I'm getting an access denied error.

If I enable the "Bypass RD Gateway server for local addresses" option, in this case everything is fine and GW passes the connection to the target server.

However, I need dual authentication, this is the purpose of using the Gateway role.

I tried:

change NPS logging settings."If logging fails, discard connection request"

Added the target server to "RAS and IAS Services".

Verified that the user has group membership in "Domain Admin" and "Domain Users".

Answer 1

Hello,

It's important to verify your Gateway authentication method. If your event log indicates you are using NTLM with HTTP, but the Gateway requires Certificate authentication (which should utilize HTTPS), then you need to examine whether any Group Policy or other settings are restricting your authentication to HTTP.

---

If the Answer is helpful, please click "Accept Answer" and upvote it.