2008R2 sp1 killed our Wyse S10's RDP Connection

[kmount]

Suspect that's going to be down to group policy or the tsconfig itself but you've eliminated the latter.

Look at Computer Configuration > Remote Desktop Services > Remote Desktop Session Host > Security > "Require user authentication for remote connections by using Network Level Authentication"

(of course you may have several policies so you may need to gpresult first)

[FN-GM]

Oh those options, yes I have those - however they are all grayed out with the bottom option selected (Enforce NLA)

not sure how to 'un-gray' them :/

I am logged in as a domain admin, local admin has the same issue.

Find the setting in group policy to changed them and do a gpupdate /force on the server. That should force it on the server.

Not sure where the setting is in group policy though.

EDIT: Even Better follow that Kim says

[sacrej]

set to disabled in gpo, tried to change to unconfigured - no joy :/

[kmount]

If it's greyed out something is controlling it normally GPO.

Do you have any apps on there that could be putting in this requirement?

Do you have a spare box in the farm to shove in the Computers container with no GPOs applied to check?

[EduTech]

In case it's maybe causing you an issue in regards to chasing down the Group Policy, Run gpresult /r on your box and see what is being applied. As kim says if it is greyed out it is generally being controlled somewhere... as he said generally GPO

[Lloyd]

you indicated an issue RDP to Win7 from Wyse S10.
we had same issue after upgrading from Wyse S10 v6 to V7.
Wyse would connect to WinXp, Win2003 terminal servers, etc but not Win7, Win2008 Terminal servers.
firewall or no firewall, could not connect.
Issue resolved on Wyse S10 OS, Connection Manager, Global Connection Settings, RDP tab, Uncheck Enable NLA box.

Lloyd