Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,604 questions
Hi, I am doing some research for current issue, thanks for your waiting.
RDS 2019 SSO with Credential Guard enabled
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 43%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Pawan Kumar
1
Reputation point
Hi Guys,
I have setup RDS Farm and configured SSO using GPO as per available articles. It works great internally with IE.
When i turn Enable Credential Guard, it break SSO and Remote App ask for password.
I understand that When Windows Defender Credential Guard is enabled, Kerberos does not allow unconstrained Kerberos delegation or DES encryption, not only for signed-in credentials, but also prompted or saved credentials.
Can RDS SSO be achieved using Kerberos constrained delegation or Resource-based constrained delegation with Credential Guard enabled?
If yes, how to configure it for all RDS users?
I have tried Resource-based constrained delegation by allowing my test client but still doesn't work.
Has anyone implemented this successfully?
1 answer
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous2021-05-21T14:39:17.31+00:00 -
Pawan Kumar 1 Reputation point
2021-05-24T00:43:34.273+00:00 Thanks for looking in to this. Let me know if it is possible to get SSO with Credential Guard.
-
Pawan Kumar 1 Reputation point
2021-05-26T23:07:05.59+00:00 Hi, just wondering if you have any update or info about this?
-
Anonymous
2021-05-27T13:39:54.017+00:00 Sorry, not yet.
-
Pawan Kumar 1 Reputation point
2021-07-05T04:49:12.727+00:00 Hi, Is there any update on this? Are you still checking this or is it fallen from your radar?
-
AndyWoutersimec-7419 1 Reputation point2021-07-20T09:38:56.333+00:00 Any updates? I am struggling with the same issue after enabling credential guard.
kind regards
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 3%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBT%3C/text%3E%3C/svg%3E)
Brett Tomes (WHITTINGTON HEALTH NHS TRUST) 0 Reputation points2024-09-13T06:26:35.87+00:00 Hello, Is this still the case that disabling Credential Guard is required to ensure our RemoteApp SSO RDS Farm works seemlessly as it did with Windows 10 clients. Has there been any progress, development or offerings from Microsoft in this space to ensure RemtoeApp SSO ease of use while enabling the benefits secure Credential Guard on Windows 11 clients?
Sign in to comment -