Sync Issues with Edge Using Remote Credential Guard (RCG) in Windows Hello for Business Environment

田中瑛土 20

I signed in to a Windows 11 device using WHfB and connected to an RDSH via RDP. When I use RDP with an ID and password, Edge signs in automatically. However, when using RCG with WHfB, Edge does not sign in automatically.

The RDSH is Win10 and Hybrid EntraID joined.

Is there a GPO setting that needs to be configured?

Any help would appreciated. Thx.

Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-04T07:48:09.0633333+00:00

Hi @田中瑛土

Do you mean Edge automatic sign in doesn't work on that remote desktop machine? Does the remote desktop Windows sign in with EntraID account or AD domain account?

Do you set any Edge policy on that remote machine? Please provide the screenshot of this page edge://policy in Edge. Have you ever logged out of Edge profile manually on that remote machine?

Does automatic sign in for other applications, like Office or Teams, work on the remote machine when using RCG with WHfB?
田中瑛土 20 Reputation points

2024-06-04T08:29:55.1433333+00:00

Hi @Yu Zhou-MSFT

Do you mean Edge automatic sign in doesn't work on that remote desktop machine?
⇒Yes

Does the remote desktop Windows sign in with EntraID account or AD domain account?
⇒Yes. Windows sign in with AD domain account.

Do you set any Edge policy on that remote machine? Please provide the screenshot of this page edge://policy in Edge.
⇒sry,I can't capture it now. I think I didn't set any Edge policies.

Have you ever logged out of Edge profile manually on that remote machine?

⇒No

Does automatic sign in for other applications, like Office or Teams, work on the remote machine when using RCG with WHfB?
⇒Office apps were able to sign in using RCG with WHfB.
Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-04T09:56:07.8766667+00:00

Hi @田中瑛土

Which version of Edge do you use?

When it doesn't auto sign in, could you please click the profile photo on top left in Edge and provide the screenshot of the profile flyout? And could you please provide a screenshot of this page edge://signin-internals/ in Edge?

Besides, could you please open a command prompt ensuring a domain account is being used, then type dsregcmd /status and provide the screenshot of the result?
田中瑛土 20 Reputation points

2024-06-20T02:04:51.61+00:00

Hi @Yu Zhou-MSFT

Sorry for the delay in answering.

Edge version is 126.0.2592.61
Here is a screenshot of my profile and edge://signin-internals/

Here are the dsregcmd/status results from
Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-20T06:35:59.9+00:00

Hi @田中瑛土

The dsregcmd /status looks OK, the device is hybrid joined. But Edge doesn't automatically sign in with Microsoft Entra account.

Could you please check if the Microsoft Entra account(AAD account) is connected to Windows successfully(observable in Windows settings > Email & Accounts) on that remote desktop machine when using WHfB?
田中瑛土 20 Reputation points

2024-06-20T07:23:49.06+00:00

Hi @Yu Zhou-MSFT

I have checked the settings screen and it looks like this. Is there any other way to check?
Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-20T08:38:13.93+00:00

Hi @田中瑛土

It seems that the Windows account settings are blocked by your organization. I'm not familiar with this part, maybe check azure portal. I suggest that you can consult your IT administrator to see if there's any other way to check.

From the Edge browser part, it will use the Microsoft Entra account connected to Windows to automatically sign in in hybrid joined environment. Maybe the Entra account not connecting leads to the issue.
田中瑛土 20 Reputation points

2024-06-20T09:11:25.65+00:00

Hi @Yu Zhou-MSFT

It seems that the Windows account settings are blocked by your organization.

I will Check with administrator for Windows settings.

From the Edge browser part, it will use the Microsoft Entra account connected to Windows to automatically sign in in hybrid joined environment. Maybe the Entra account not connecting leads to the issue.

Thank you for understanding the problem.
I would like to know if this problem is a limitation or a bug when using RCG.
Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-20T09:38:09.2333333+00:00

Hi @田中瑛土

Please kindly check my answer.

Accepted answer

Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-20T09:38:18.5766667+00:00

Hi @田中瑛土

First, we need to confirm if the Microsoft Entra account is connected to Windows when using RCG. As you say you'll check with your administrator.

If it's not connected, then I think it's a limitation with RCG. If it's connected, then I think it's an issue with Edge auto sign in, you could provide feedback to Edge team by pressing Alt+Shift+I in Edge.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Regards,

Yu Zhou
Please sign in to rate this answer.

1 person found this answer helpful.
田中瑛土 20 Reputation points

2024-06-21T01:23:44.8233333+00:00

Hi @Yu Zhou-MSFT

Thanks for the information.

First, I checked with the administrator and he did not seem to have any restrictions.

Is it not a WindowsServer specification that the mail and account settings do not show up?
Is there another way to verify that the Entra account is connected to Windows?

Is there anything in the official Microsoft documentation regarding edge limitations when using RCG?

Yu Zhou-MSFT 12,776 Reputation points Microsoft Vendor

2024-06-21T02:36:02.74+00:00

Hi @田中瑛土

Is that a Windows Server? If so, the mail and account doesn't show. But you say the remote desktop is Win10 in the question.

I'm Edge support engineer so I'm not familiar with Entra account related things. I can only give you some suggestion. As your machine is AAD joined, maybe you can check Azure portal to see if there's any configuration shows the account connection state.

For the last question, from Edge side, I don't find such documentation.

If you need to get more information about Entra ID and RCG, I suggest that you can also ask another question with only 'Microsoft Entra ID', 'Windows Security' and 'Remote Desktop' related tags.

Thanks for your understanding.

田中瑛土 20 Reputation points

2024-06-21T04:17:44.7933333+00:00

Hi @Yu Zhou-MSFT

I apologize that my information was incorrect.

I will check AzurePortal.

Thanks.
Sign in to comment

Share via

Sync Issues with Edge Using Remote Credential Guard (RCG) in Windows Hello for Business Environment

0 additional answers