RDP was not accessible for Windows server 2019

0

Hi,
We are unable to connect to Remote Desktop to the Windows Server 2019 from the last two days. Following is the error we are getting while try login to the server

"An authentication error has occurred.
The function requested is not supported
Remote computer: <computer name="">
This could be due to CredSSP encryption oracle remediation.
For more information, see https:/go.microsoft.com/fwlink/?linkid=866660"

We also installed latest windows updates using AWS System Manager to check if it resolves the issue, But it did not help.

MaddyB
已提问 4 年前2027 查看次数
1 回答
1

I'm sure you've moved on from this issue, but I am going to provide a solution for others since I have been messing with this very issue all afternoon while studying for the SAA exam.

Assuming you have RDP inbound on port 3389 allowed in the security group, the problem is with the Network Level Authentication setting on the Windows Server. It is located in Settings - System - Remote Desktop, and then click on advanced settings. To be able to RDP into server from outside the VPC (as in, my house), I had to uncheck the box. Then, I could RDP into the system as the AWS documentation says you should.

Be aware this is not the recommended setting and may make your machine vulnerable, but there was no other way to get the CredSSP error to go away.

To figure this out, I had to create a Linux instance with the MATE GUI in the same VPC just so I could RDP to the Windows instance from the Linux instance using Remmina.

I then took the time to figure out how to do it through Powershell. I installed the Session Manager role and agent on the Windows instance so I could connect to Powershell through the AWS console.

First, get the Windows hostname...
PS c:> $env:computername

Then, set a new env variable for the computer name...
PS c:> $ComputerName = "EC2AMAZ-******" (or whatever the name is)

Finally, enter this command...
PS c:> (Get-WmiObject -class Win32_TSGeneralSetting -Namespace root\cimv2\terminalservices -ComputerName $ComputerName -Filter "TerminalName='RDP-tcp'").SetUserAuthenticationRequired(0)

After all that, you should be able to RDP in. You might reboot the instance to be sure the new policy takes effect.

已回答 3 年前
  • Confirmed that unchecking the "Network Level Authentication" box worked with Server 2019 Datacenter. Much appreciated.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则