A specific credential can be used in the Active Roles Console on the Active Roles Administration Service host, but not from a remote server (4377746)

Authenticating with a specific credential in the Active Roles Console on the Active Roles Administration Service host is successful. Attempting to use the same credential in the Active Roles Console on a remote host fails with one of the following errors:

The user name or password is incorrect.

OR

The connection with the remote endpoint was terminated. 

The Active Directory Domain Controller which is serving as the logon server for the Active Roles Administration Service host has the following Audit Failure event in the Security Event Viewer Logs:

EventID 4625
An account failed to log on
0xC000006E

The problem user is in the Protected Users Active Directory role group.

Being in this group will prevent remote authentication.

If remote authentication is necessary, the user must be removed from the Protected Users Active Directory role group. Otherwise, RDP to the Active Roles Administration Service host and authenticate using the local Active Roles Console.