Sessions fail when using an account that is a member of the "Protected Users" AD Security Group (4251649)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

Sessions fail when using an account that is a member of the "Protected Users" AD Security Group
Description

Sessions fail when using an account that is a member of the "Protected Users" AD Security Group, when attempting to connect the error is shown:

"This computer can't connect to the remote computer.

Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator."

SPS logs show the following error:
CSSP Packet contains NTSTATUS error code; error_code='C000006E'
Resolution

STATUS

Change Request # 353031 (Kerberos authentication for RDP connections) was added in SPS release 8.0 LTS, However, this does not yet include the use-cases which depend on AA plugin or Credential Store plugins such as SPP related sessions.

Feature request # 466766 (RDP Kerberos authentication with SPP and other plugins) was added in SPS release 8.2

WORKAROUND

For versions older than 8.0 LTS - None, users will need to be removed from the "Protected Users" AD group
Change Request

353031 | 466766

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title