Logon attempt failed via RDP periodically

Question

Hey everyone,

We've got an issue, domain users who allow to access to member server\client via RDP couldn't access even Administrator who allow to access to any computer\Server object in domain.
it's happened periodically.
which means if we would reset VM three or four time then we could access via RDP, or if we would reset one of DCs

the issue appear on Layer 2 in the same network\LAN
All communication is good including required ports tested via telnet and windows firewall is off, we just keep getting "The logon attempt failed"
We are doing authentication with the same credentials via VM console and it worked normally.
if we make authentication via IP address or full FQDN example "PTR-01.domain.local." it works great, only when we tried to access via NetbiosName name example: "PTR-01" we getting error "Logon attempt failed"

There is no much information in event viewer about this.
also we run a sniffer on the network and it appears like the source who initiate the session he is also closing it after we enter the credentials.

Does anyone encounter with this issue or has any direction?

Answer 1

Hi,

When you try to connect using netbios , the machine will add automatically a suffix defined in the suffix search list of the client machine to able to send a DNS query and resolve the name. The DNS resolve only FQDN not Netbios.
I think when you try with Netbios the DNS return a wrong IP.
Check the IP returned by the following command:

ping PRT-01.domain.local

ping PRT-01

Please don't forget to mark helpful reply as answer

Answer 2

Hi @Thameur-BOURBITA

Thanks for your answer.

But this is not the case, When I'm pinging to NetBIOS name the windows autocompleted to FQDN.
and as I mentioned the session is established, it's drop\failed on authentication process, which means it's passing the DNS process.

Answer 3

Any news here? Having this issue

Answer 4

Having the same issue. Has any fix been found?

Answer 5

We have also the same issue. any news with possible fix?