Return
-
Title
After installing Microsoft Security Patches on DCs, no longer able to connect to RDP sessions. -
Description
After installing the February 2022 Microsoft Security Patches on all domain controllers, RDP sessions are failing to authenticate. SPS logs show the following error:
DC refused user authentication; user='username', domain='domain', workstation='clientname', reason='WBC_ERR_AUTH_ERROR', nt_message='NT_STATUS_ACCESS_DENIED', display_string='{Access Denied} A process has requested access to an object but has not been granted those access rights.' -
Cause
The issue has been determined to be related to the "Require Domain Membership" check box, located in the Connection Policy settings. When this box is checked, and the authenticate is cross-forest, meaning a user from one forest is authenticating to a system in another forest, the connection will fail. -
Resolution
STATUS
Defect PAM-16200 has been been submitted to the product team for review. A solution will be investigated for a future release of SPS.
WORKAROUND
The suggested workaround for the moment is to leave the "Require Domain Membership" box unchecked, to avoid this issue. -
Change Request
PAM-16220