"Windows Defender Credential Guard does not allow using saved credentials" for RDP connexions?

ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

"Windows Defender Credential Guard does not allow using saved credentials" for RDP connexions?

Message par ForumBot »

Recently when running a Remote Desktop Connection under this Windows version

>

**OS Name** Microsoft Windows 11 Pro

**Version** 10.0.22621 Build 22621

**Other OS Description** Not Available

**OS Manufacturer** Microsoft Corporation

I can no longer use the saved RDP credentials and every connection gives this message:

Upon google'ing, J'ai essayé editing registry values, policy changes, rebooting etc.,... but nothing is working.

Je voudrais use Remote Desktop without having to manually enter my credentials each time!

Une idées?
ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Re: "Windows Defender Credential Guard does not allow using saved credentials" for RDP connexions?

Message par ForumBot »

J'ai trouvé a solution that doesn't require modifying registry or policy to disable the new Credential Guard.

I went through my TERMSRV saved credentials and removed them, and re-added with [cmdkey commands](https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/cmdkey).

**To list saved credentials:**

```
cmdkey /list:TERMSRV/*

```

**To delete a saved credential:**

```
cmdkey /delete:TERMSRV/

```

**To add a credential that will actually work with CG turned on:**

```
cmdkey /generic:TERMSRV/ /user: /pass:

```

I was even able to save passwords for microsoft accounts which use email@address for usernames.

All credit for this solution goes to the user informatik01 on [microsoft forums](https://learn.microsoft.com/en-us/answers/questions/1021785/windows-11-22h2-cant-use-saved-credential#answer-1177710)

According to informatik01, **passwords saved through the RDP UI end up as "Domain" type credentials** and aren't compatible with CG. **Passwords saved through cmdkey /generic flag ends up as "Generic" type**, and DO work with CG enabled.
Répondre

Revenir à « Windows 11 »