User can't rdp to a computer with his AzureAD account, but i can with mine

Question

One of my user need to rdp from a computer to another, both of the computer are in the same AzureAD domain and he can directly connect to both of them with his account.

But if he use the remote desktop app, an error "login attempt failed" appear

If i use my acount, it's working without problem

I added both of our account in the "remote desktop users" group, both of us are in the same Azure groups and the policies applied are the same for both of us.

I don't know what else to check, so if anybody have a clue on what could be the problem, that would be very helpful

Thank you

Answer 1

Hi Moonen Quentin (ZP FamenneArdenne),

Thank you for posting in the Q&A Forums.

Make sure the user account has been added to the Remote Desktop Users group. This is usually a required permission for remote desktop connections.

Check if there are any other group policies or security policies that restrict the user's remote desktop access.

Verify that synchronization between Azure AD and the local AD (if any) is working properly. Ensure that the user's account information and group membership are up-to-date in Azure AD.

Check the configuration and logs of Azure AD Connect (if used for synchronization) for synchronization errors or delays.

Check the Remote Desktop Services configuration

On the target computer, open the Services manager and check if the Remote Desktop Services service is running.

If the service is not running, try to start it manually and see if there are any error messages.

Remote Desktop Connection Settings

Check the Remote Desktop Connection settings of the target computer to ensure that remote connections are allowed and that no specific IP address or network range restrictions have been set. 3.

Ensure that the network connection between the two computers is stable and not interrupted or blocked.

Test the network connection using the ping command or a network diagnostic tool.

Firewall and security software:

Check the firewall settings on the target and client computers to ensure that they are not blocking remote desktop connections (the default port is 3389).

If you are using third-party security software, check its settings to make sure that it is not treating remote desktop connections as threats and blocking them.

Verify that users know their account passwords and that the passwords are not expired or locked.

Check that there are no policies such as password complexity or length requirements that affect the validity of a user's password.

Check if there is an account lockout policy (e.g., locking the account after too many failed login attempts). If so, check if the user account is locked and consider unlocking it.

On the target computer, open Event Viewer and check the logs related to the Remote Desktop Service (e.g., Security and Application logs under “Windows Logs”). logs).

Look for error messages related to failed logins and perform further diagnostics based on the error code.

Try connecting directly to the target computer using the Windows built-in Remote Desktop Connection utility (mstsc.exe) to see if you can log on successfully.

If the user is using a third-party remote desktop application, try connecting using the Remote Desktop Connection tool that comes with Windows or another trusted third-party client.

Best regards

NeuviJ

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.