Windows 10: Consistently prompt for x2 login credentials when using Win11 24H2 with Credential Guard...

We have recently upgraded some of our laptops to Win11 24H2, which has enabled credential guard by default - which disables MSCHAPv2 by default for single sign-on. on first few boots of the laptop the login prompt requires x2 authentication boxes x2 username and password. One to login into the domain and another to authenticate onto the wireless network. However after authenticating onto the laptop through x2 login prompts and after a few more reboots, the login prompt behaviour changes. Whereby the login prompt reverts to a singular login credential box and the wifi can be accessed through

:)

 

Credential Guard lab companion

Source: Credential Guard lab companion Datacenter and Private Cloud Security Blog


See also:

• Enable or Disable Credential Guard in Windows 10 Windows 10 Security System Tutorials
• Verify if Credential Guard is Enabled or Disabled in Windows 10 Windows 10 Security System Tutorials

 

Credential Guard

When will Credential Guard be supported on the same Windows 10 Enterprise device as Barkly and VMWare Workstation Pro.

It would be nice to be able to run these products without sacrificing Credential Guard.

Moved from Insider

 

How to disable Windows 11 Defender Credential Guard?

After upgrading to Windows 11 2022H2, RDP always prompts for credentials and Edge Dev doesn't autofill credentials. According to this, Windows 11 H2 enables Windows Defender Credential Guard. I tried to follow the steps to disable it in the Group Policy Editor (it was set to Not Configured) and rebooted, but it doesn't help. How to resolve this scourge?

BTW, shouldn't we enable such features by default and leaving users to figure out to restore the old behavior for hours, instead of asking on install?