MSTSC not saving credentials

[TJ-Diggers]

I have users who are unable to save password or creds in mstsc and it’s driving me mad!

 

The device is managed by intune and user is in azure ad. I know it’s lilly to just be a settings but I have looked an cannot find it.

 

anyone have any ideas?

[free780]

I wouldn't. It saves credentials in Credential Manager, with RC4. It may be a built in setting in secpol.msc disabling RC4.

There are the settings to delegate credentials in group policy. You can enable them, with Intune it may have to be a powershell script.

 

Also please please don't expose RDP on the public internet. This is the main method of Ransomware getting in.

Use A VPN and MFA. At least a RDS Gateway with MFA.

Edited September 2, 2020 by free780

[wccppa1]

There is a group policy for saving password, maybe that is being applied: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\DisablePasswordSaving =1