Windows 10: Disable Windows Hello for RDP remote credentials prompt

My organization recently implemented Windows Hello for Business. I now use WHfB to log into my local machine. When I use RDP to connect to a remote server, it prompts me for Windows Hello credentials PIN, Security Key, etc., but I do NOT want this, since it doesn't work on the servers. I have to select "More choices" and then select username/password authentication.How can I disable Windows Hello for remote credentials prompts but still use Windows Hello to sign in to the client machine?Other threads have been posted for this same issue, but are now closed. The answers were out-of-touch, off

:)

 

RDP Client Hanging Before Prompting for Credentials

I help manage a small Windows environment of about 15-20 workstations/laptops, and the oldest desktop we have all of a sudden started hanging from anywhere between 1 to 5 minutes after entering the IP or hostname before functioning as expected.

Outline of Problem: Open mstsc, enter an IP, hostname, or FQDN, then click "Connect". Once the "Conenct button is clicked, the prompt grays out for between 1-5 minutes before it prompts for credentials. Everything seemingly works fine after that. No other
devices have this issue, and they're all in the same OU as the other Windows desktops and the same account works fine on other devices. It is not networked related, as the same issue occurs when connecting to devices that are on the same switch or remotely
over an L3VPN. To the best of my knowledge, no changes were made recently, so I am not quite sure what caused this. None of the other Windows box is having this issue and they mostly have the exact same software footprint with slight differences in hardware
(all are Dells). It's on Windows 10 Professional version 1809 and it's currently on the May build(.1217). I cannot confirm if this device specifically had the same problems on a previous version of Windows 10. While the connection is grayed out while waiting
for the credentials prompt to render, I am also still able to comfortably use the desktop without any issues.

Things I've tried:

• Connected via hostname, IP, and FQDN at credential prompt along with flushing DNS. All name resolutions are good.
• In the RDP options, I've tested disabling persistent bitmap caching, remote audio, printers, smart cards. I've lowered connection quality requirements and colors as well.
• Used multiple credentials, including testing the same credentials from other Windows 10 devices to the same destination
• Ensured any networking applications are closed/not running (primarily Cisco AnyConnect) and disabled all firewall and antivirus components
• Flushed DNS cache and confirmed name resolutions are correct
• Set the RDP process priority to "Realtime" and "High" in the task manager while confirming no bottlenecks in CPU/RAM usage before clicking "Connect"
• Added this registry key: HKLM\software\policies\microsoft\windows nt\Terminal Services\Client\fClientDisableUDP
• Confirmed I'm connected to the local domain controller (echo %LOGONSERVER%)

 

GPO to forget saved RDP credentials

Users are saving RDP credentials in their RDP mstsc window. How to remove the saved credentials. I know there is a option to remove REMEMBER ME option. But that is not removing saved credentials.

Also i created a test machine to test this with test AD

If i save by calling remotely using IP and save password next time it ask me password giving an error

“Your system administrator does not allow the user of saved credentials to log on to the remote computer XXX because its identity is not fully verified. Please enter new credentials”.

then i have to save RDP details in generic credentials in credential manager using TERMSRV

I believe in real environment its show having issue while saving when calling using IP.

My aim is to flush saved credentials for RDP and disable the remember me option( this solution i got)

 

RDP Asking for Credentials Twice


Hi all,

Im tying to configure a Microsoft Windows Server 2016 Standard in order to only ask for credentials one time ( while trying to RDP the machine).

I've disabled the following GPO- But server is still asking for password a second time.

Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Security -> Always prompt for password upon connection (which is Disabled)

Does anyone have any idea which GPO or setting may be preventing this?

Kind regards