Credentials Did Not Work Remote Desktop: Troubleshooting and Solutions

Credentials Did Not Work Remote Desktop: Troubleshooting and Solutions

Windows Remote Desktop is a valuable tool for accessing remote computers, enabling users to control and interact with them as if they were physically present. However, users may encounter an issue where the Remote Desktop does not save credentials, requiring them to manually enter login details each time they access a remote computer. This article delves into the causes of this issue and provides comprehensive solutions to resolve it.

Causes of the “Credentials Did Not Work” Error

Several factors can contribute to the “Credentials Did Not Work” error in Remote Desktop:

• Delegating Saved Credentials Policy: A group policy setting may prevent the use of saved credentials for remote logins.
• Credential Manager Policies: Incorrect registry settings or group policies may interfere with the storage of passwords in Credential Manager.
• Incorrect Hostname Aliases: When working with multiple remote computers, hostname aliases in the HOSTS file may be incorrect or missing.
• Windows Security Policy: Non-admin users may be restricted from signing in remotely due to security policies.

Solutions to Fix the “Credentials Did Not Work” Error

To resolve the “Credentials Did Not Work” error in Remote Desktop, follow these comprehensive steps:

1. Modify Delegating Saved Credentials Policy

• Open Group Policy Editor (gpedit.msc).
• Navigate to “Computer Configuration > Administrative Templates > System > Credentials Delegation.”
• Disable “Allow Delegating Saved Credentials with NTLM-only Server Authentication.”
• Add “TERMSRV/*” to the “Show” field.

2. Adjust Credential Manager Policies

• Registry Editor Method:
  • Open Registry Editor (regedit).
  • Navigate to “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.”
  • Set “DisableDomainCreds” to 0.
• Group Policy Method:
  • Open Group Policy Editor (gpedit.msc).
  • Navigate to “Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.”
  • Disable “Network access: Do not allow storage of passwords and credentials for network authentication.”

3. Configure Hostname Aliases

• Open the HOSTS file (C:\Windows\Sysnative\drivers\hosts).
• Add hostname aliases for remote computers (e.g., “127.0.0.1 boxA.local”).

4. Verify User Permissions

• Ensure that non-admin users have the necessary permissions to sign in remotely.

Conclusion

By implementing the solutions outlined in this article, users can effectively resolve the “Credentials Did Not Work” error in Remote Desktop, ensuring seamless and secure access to remote computers. These methods address various potential causes of the issue, ranging from group policy settings to credential manager configurations. By following these steps, users can save credentials and streamline their remote desktop experience.

FAQ

What causes the “Credentials Did Not Work” error in Remote Desktop?

The “Credentials Did Not Work” error can be caused by several factors, including:

• Incorrectly configured group policies that prevent the use of saved credentials.
• Improper settings in Credential Manager that interfere with password storage.
• Incorrect hostname aliases in the HOSTS file when working with multiple remote computers.
• Windows security policies that restrict non-admin users from signing in remotely.

How can I modify the Delegating Saved Credentials Policy?

To modify the Delegating Saved Credentials Policy:

• Open Group Policy Editor (gpedit.msc).
• Navigate to “Computer Configuration > Administrative Templates > System > Credentials Delegation.”
• Disable “Allow Delegating Saved Credentials with NTLM-only Server Authentication.”
• Add “TERMSRV/*” to the “Show” field.

How do I adjust Credential Manager Policies?

To adjust Credential Manager Policies:

Registry Editor Method:

• Open Registry Editor (regedit).
• Navigate to “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.”
• Set “DisableDomainCreds” to 0.

Group Policy Method:

• Open Group Policy Editor (gpedit.msc).
• Navigate to “Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.”
• Disable “Network access: Do not allow storage of passwords and credentials for network authentication.”

How can I configure Hostname Aliases?

To configure Hostname Aliases:

• Open the HOSTS file (C:\Windows\Sysnative\drivers\hosts).
• Add hostname aliases for remote computers (e.g., “127.0.0.1 boxlocal”).

How do I verify User Permissions?

To verify User Permissions:

• Ensure that non-admin users have the necessary permissions to sign in remotely. This can be done through local user and group management or by configuring remote desktop user permissions.