Share via

Protected users - Ntlm fallback

Anonymous
2022-06-08T21:40:42+00:00

Hi,

I'm testing the protected users group in Active directory, and I'm testing this with a highly privileged user which is not able to access a remote machine using RDP, and by the logs it looks like the user falls on Ntlm, which receives an error message since Ntlm is not allowed for members of the protected users group.

The user is trying to login to a remote machine by Fqdn and not an IP address.

In the event logs I couldn't find any event log, such as event log 4771 which will shed some light over the reason for the kerberos ticket to be denied, kerberos audit logs were enabled in the group policy.

The user is not able to login to any remote desktop (though he has the permission/privilege to do so).

What can I do to further troubleshoot this?

Thanks in advance for the help.

Windows for home | Other | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2022-06-09T09:23:59+00:00

    Thanks for the tip.

    Was this answer helpful?

    0 comments
  2. Igor Leyko 111K Reputation points Independent Advisor
    2022-06-08T22:12:49+00:00

    Hi,

    My name is Igor, I have 12 Microsoft MVP awards. It's a pleasure for me to help others and I'll do all my best to help you. I'm sorry you have a problems.

    AD questions it is more effective to ask at Q&A forum https://docs.microsoft.com/en-us/answers/index....

    It is oriented to admins and corporate users, and this forum - to home users so local experts may have no corresponding knowledge, sorry.

    Was this answer helpful?

    0 comments