ASG-RemoteDesktop 2019 and NLA

[khaos]

I'm running ASG RD 2019 on a Windows Server 2019 and have the same error, which appears so long time in different versions of ASG-RD:
The remote host need network level authentification, but your Computer don't support it.

I have no problems with MS RDP-Client, I also have checked and changed the registry keys, which on different places here were the solution in the past.
But it don't help.

No idea, what i can do more. Please help.

[DevOma]

Please check your settings => Settings=>Application=>Disable "NLA" check must be enabled (should be by default)

[khaos]

It was not enabled (by default), I enabled it now, but there is no change. Error still exists.

[DevOma]

Did you restart the app after applying the change - if enabled there should be no check anymore - can you post the error message as screen?!?

[khaos]

Yes, several times after every changes. Noting helped.
The error rises only, when i try to connect to Windows 10 oder Windows Server 2019.
The error message:
"Warning:
The remote computer .. requires Network Level Authentification, which is not enabled in the rdp connection properties."
RDP-Client on the same server works fine.

Best regards
Uwe

[khaos]

On the server, where ASGRD is installed, RDP connection status request via powershell shows (enabled):
(Get-WmiObject -Class "win32_TSGeneralSetting" -Namespace root\cimv2\terminalservices -ComputerName %server% -Filter "TerminalName='RDP-tcp'").UserAuthenticationRequired
-> 1

[DevOma]

I think you have enabled option "Disable CredSSP" in the RDP connection propeties! Please check that... und uncheck this option!

[khaos]

I have try out ASGRD on my computer (Windows 10) and move my computer outside of any gpo, set in the pure local gpo all delegation keys (allow it) enabled. But the same error ..
I configue Credssp via Powershell (get/enable-wsmancredssp) on Destination server with Role Server and my computer with the role Client and the DelegateComputer *.domain. But the same error ..

[DevOma]

Select your Connection object - open Properties dialog - switch to category "RDP-Connection" - there you find these options

[khaos]

Ok, thats it. No idea, where this setting come from. I do not remeber, that I have set it.
Possible, years ago I configured this for security (Oracle) and it comes through the database, which I have migrated.
Thanks for help, I would find it never there.

[DevOma]

Great :-)