Can no longer connect with MSTSC on Windows 11 24H2

Question

As a teacher i often use RDP to display student PCs for the class, but know i get an error saying tat i dont have pernissions for making these connection an should contact the system administrator. My PC is with Danish language so perhaps i translate it wrong for this question.

I have been messing around to be able to control an external server on another domain so i have worked with enabling CredSSP to be able to do this, it works. in the meantime i also updated to 24H2, and found the problem with RDP now broken, and i used it often before!

So any ideas on what could have ben altered or need to be reconfigured for this to work?

Here is the error message in danish when trying to connect to Windows Server 2022 running as an VM in Hyper-V on the same computer:

Answer 1

Greetings. My name is Anis. I'll be glad to help you today.

It sounds like you've made several changes to your system, including enabling CredSSP and updating to Windows 24H2, which might have affected your ability to use Remote Desktop Protocol (RDP) to connect to student PCs.

Here are some steps and considerations to help you troubleshoot and resolve the issue:

(Note: You need Admin access to perform the following steps. If you don't have Admin access, please contact the School's IT Admin.)

1. Check Group Policy Settings

CredSSP Settings: Since you enabled CredSSP for controlling an external server, it might have affected your RDP settings. CredSSP is used for delegation of credentials, but it can sometimes interfere with standard RDP connections.

Press Windows+R > Enter gpedit.msc to open Group Policy Editor.

Navigate to:

Computer Configuration > Administrative Templates > System > Credentials Delegation.

Check if any policies related to CredSSP or RDP are enabled or misconfigured.

If necessary, reset these policies to their default state.

2. Allow RDP Connections:

Ensure that RDP is still enabled on your PC and the student PCs.

Navigate to:

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections.

Verify that the policy "Allow users to connect remotely using Remote Desktop Services" is enabled.

Answer 2

Hello Anis and thanks for your fast respons to my question.

I would like to give a bit more information about my computer.

I am the sole owner of this e.g. administrator and only user (except the user administrator, which is disabled by default) i installed windows 11 from an ISO-file from our Portal.azure-education library, updated with all Windows updates.

I work with a lot and especially Server technology and microsoft windows, using hyper-v on my computer, an has tested that i am able to use RDP internally on my VMs, but no longer from my own workstation as written in the initial support question.

The tips you send me have i checked and tried without any errors or corrections!

My delegations are enabled for one server only, my new Core edition that need CredSSP.

What can i try more, its a bit confusing becuse i run my Windows 11 in Danish language!

Regards

Anders Sekkelund

Answer 3

Thank you for the additional details. Since you're the sole administrator and have already checked the common configurations, the issue is likely related to the specific changes you made for CredSSP or the Windows 24H2 update.

Verify CredSSP Configuration:

Open PowerShell as Administrator.

Run the following command to check the current CredSSP configuration:

Get-WSManCredSSP

If the output shows that CredSSP is enabled for the client role, it might be restricting your RDP connections.

Temporarily Disable CredSSP:

To test if CredSSP is causing the issue, disable it temporarily:

Open PowerShell as Administrator. Enter the following command.

Disable-WSManCredSSP -Role Client

After disabling CredSSP, try connecting to the student PCs via RDP again.

If disabling CredSSP resolves the issue, you can re-enable it specifically for the Core server:

Enable-WSManCredSSP -Role Client -DelegateComputer "CoreServerName"

Replace CoreServerName with the actual hostname or FQDN of your Core edition server.

Answer 4

Thanks again, and i tried dto disable CredSSP but gets the following error!!

Might be something here...

Answer 5

Hello again,

i tried to use the command once more and then it worked, but my RDP still gives the same error!

More exciting things to try??

regards

Anders