Share via

Disable NLA Network Level Authentication

Anonymous
2023-11-16T17:00:10+00:00

Dear Microsoft Support Team,

I am trying to disable NLA and I have it disabled from:

local group policie/administrative template/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security

But when I go to Control Panel/System and Security/System/Remote settings/System Properties/Remote/Remote Desktop

I can't uncheck the Allow connections only from computers running Remote Desktop with NLA because it is blocked.

Thank you for your time and support. I look forward to your prompt response.

Best regards,

Windows for business Windows Server Directory services Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

31 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-11-30T12:09:32+00:00

    Hi Daisy

    Good Day.

    There are two DCs in the domain and both have similar local policies and GPOs configured.

    Regards

    Alberto

    0 comments
  2. Anonymous
    2023-12-01T11:49:11+00:00

    Hi Daisy

    Good Day.

    I know how to unlock it, I have to take the domain controller out of the domain and put it in the Workgroup and it lets me unlock it.

    Thank you very much for your help.

    Regards

    Alberto

    0 comments
  3. Anonymous
    2023-12-04T05:58:41+00:00

    Hello Albertosd77,
    Thank you for your reply.

    So now you can uncheck the option "Allow connections only from computers running Remote Desktop with NLA", am I right?

    Best Regards,
    Daisy Zhou

    0 comments
  4. Anonymous
    2023-12-04T13:15:16+00:00

    Hello Daisy

    If I remove it from the domain, it appears like this.

    But when I enter it in domain it appears like this and if I look at a GPresult I have the policies disabled.

    Best Regards

    0 comments
  5. Anonymous
    2023-12-05T01:51:22+00:00

    Hello Albertosd77,
    Thank you for your reply.

    Please make this policy from "disabled" to "not configured" within "Beta policy".

    Then you make this DC using only Default Domain Policy, if the option is checked or not? I mean you put this DC in the domain instead of in the OU named Domain Controllers.

    Best Regards,
    Daisy Zhou

    0 comments