Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

"Windows Defender Credential Guard does not allow using saved credentials" for RDP connexions?

ayi

Recently when running a Remote Desktop Connection under this Windows version

OS Name Microsoft Windows 11 Pro

Version 10.0.22621 Build 22621

Other OS Description Not Available

OS Manufacturer Microsoft Corporation

I can no longer use the saved RDP credentials and every connection gives this message:

Upon google'ing, J'ai essayé editing registry values, policy changes, rebooting etc.,... but nothing is working.

Je voudrais use Remote Desktop without having to manually enter my credentials each time!

Une idées?

ayi

J'ai trouvé a solution that doesn't require modifying registry or policy to disable the new Credential Guard.

I went through my TERMSRV saved credentials and removed them, and re-added with cmdkey commands.

To list saved credentials:

cmdkey /list:TERMSRV/*

To delete a saved credential:

cmdkey /delete:TERMSRV/<targetNameOrIp>

To add a credential that will actually work with CG turned on:

cmdkey /generic:TERMSRV/<targetNameOrIp> /user:<username> /pass:<password>

I was even able to save passwords for microsoft accounts which use email@address for usernames.

All credit for this solution goes to the user informatik01 on microsoft forums

According to informatik01, passwords saved through the RDP UI end up as "Domain" type credentials and aren't compatible with CG. Passwords saved through cmdkey /generic flag ends up as "Generic" type, and DO work with CG enabled.