This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 37%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
Surface 4 Pro Client (machine A) can connect via mstsc /remoteguard to (machine B) without entering passwords (SSO).
Inside of machine the file shares of Machine C should be accessed:
Any helpful ideas or troubleshooting steps out there?
I'm collecting experiences for an greater rollout here.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 73%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESQ%3C/text%3E%3C/svg%3E)
Hi,
Just want to confirm the current situations.
Please feel free to let us know if you need further assistance.
Best Regards,
Sunny
Hi,
Thanks for posting in Q&A platform.
Before we go further, could you please help to describe and provide more details about your environment?
Is there any related error message or event log on DC or server? If yes, please help provide for further troubleshooting.
Best Regards,
Sunny
----------
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi Sunny,
I described as much needed to make the environment as simple as possible to avoid wrong directions.
So I would need a starting point for troubleshooting or at least a known bug report, because "Connect to other systems using SSO" isn't working in "Windows Defender Remote Credential Guard" in combination with "Device Guard enabled".
SSO works, when "Device Guard" = disabled.
SSO doesn't work, when "Device Guard" = enabled.
https://learn.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard
It is documented in this picture:
This is a quick note to let you know that I am currently performing research on this issue and will get back to you as soon as possible. I appreciate your patience.
If you have any updates during this process, please feel free to let me know.
Hi SunnyQi, maybe you have it already seen, there is Andreas Bergen with the same issue.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 9%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBA%3C/text%3E%3C/svg%3E)
Hello everybody,
we have the same issue and I just tested it and can confirm that disabling "credential guard" makes "remote credential guard" work again.
I know that both features used to work together but stopped working some day in 2020. Maybe there was a Windows update in 2020 which broke things?
Any help is greatly appreciated.
Best regards
Andreas
Hallelujah, I'm not alone with this issue ;) Thanks for sharing.
BTW, I have opened a ticket with Microsoft Premier Support and got the information that "There is a regression in the Windows 10 20H2 Kerberos code, introduced by the 20H1 (2004) release. Windows 10 1909 and earlier clients do not show/cause this problem."
According to the ticket Microsoft is actually working on a fix for this.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 92%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
Good news: According to Microsoft and verified by my own tests the issue is fixed after installation of July 2021-Windows Updates.
Thank you Andreas. Great news.
Hi,
Do you now KB number or CVE for this fix?
Hi,
the only information I have been given in the ticket is this:
"Update Type: Cumulative Non-Security (Upadte)
KB Article: 5002690
Estimate Release: 6/15/2021 10:00AM PST."
Unfortunately the mentioned KB Article seems not to be publicly available, so this probably won't help.
Best regards
Andreas
Are you asking, because you think it is back in Windows 11?
(I have now the same issues again in Windows 11)
The (or a similar) issue seems to show up again in W10 as well.
So I opened another Microsoft support case regarding this. I'll keep you updated.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 12%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECS%3C/text%3E%3C/svg%3E)
Same issue here, did you get credential guard with remote credential guard worked?
According to Microsoft they have been able to reproduce the issue while the root cause is not yet known (as of Mar 9th, 2022).
They also don't know a workaround yet (me neither).
I'll keep up you updated once I get more information.
Thanks, Workaround for now is to disable Credential Guard or Disable WDRCG ;)
Two days ago I've received the info from Microsoft that there's a code candidate supposed to fix the issue expected for preview release in April.
Danke für die Info. Ist wirklich ein nerviger Bug.
@Sunny Qi : Did you found already something?
There was a third one reporting the same issue in January 2019:
https://github.com/MicrosoftDocs/windows-itpro-docs/issues/2483
Hi together, one important thing to know is, maybe, that we use the current "Microsoft Security Baseline":
"MSFT Windows 10 20H2 and Server 20H2 Member Server - Credential Guard"