How To Disable Credentials Prompt of Remote Desktop 6.0 [RDP] - Updated

. Tuesday, June 3, 2008

Update: Since I posted this little article Windows XP Service Pack 3 came out and brought with it whole new version of RDP client which finally works right, saves credentials and does well all round, Including built-in support for NLS – Effectively makes article below obsolete.

Remote Desktop Connection client 6.0 introduces new authentication features to improve security for Windows Vista and Windows Longhorn Server, which makes it mandatory for the user to enter logon credentials before RDP client can establish connection to the remote server (" Enter your credentials for <server>. These credentials will be used when you connect to the remote computer" ), but if the remote machine is configured to show logon warning message or if the remote system happens to be Windows 2000 or XP, you’ll need to enter the credentials again at remote machine’s logon screen.

There is however a workaround to skip the credentials screen that RDP 6.0 client shows by choosing “Do not attempt authentication” under Authentication options on the Advanced tab, but this option is not set permanently.

To permanently skip the additional credential screen of RDP 6.0 client, edit the Default.RDP file in notepad to include enablecredsspsupport:i:0 .
The Default.rdp is located in each user’s My Documents folder.

Including enablecredsspsupport:i:0 disables the Credentials Security Service Provider for the connection.

If you use separate .RDP file for different servers, modify each of those .RDP files.
Below is the content section of the default.rdp file with enablecredsspsupport:i:0 option included.

redirectposdevices:i:0
authentication level:i:0
enablecredsspsupport:i:0
prompt for credentials:i:0
negotiate security layer:i:1

Note that this workaround is suggested only if you connect Windows 2000/2003/XP systems because according to Terminal Services Team blog post“This option does disable the new credential prompting behavior, but it also disables support for Network Level Authentication for Vista (and Longhorn Server) RDP connections; Network Level Authentication requires credentials to be provided by the client before a session is created on the server side.”

So if you do connect to Vista/Longhorn over RDP, you’ll not be able to use this tweak.


11 comments:

Anonymous said...

Thanks! I have been trying to disable that!

Anonymous said...

Thanx a lot. U saved my ass..

shitfucker said...

fuck yea. you're the man

Anonymous said...

Works fine for me connecting to Windows Server 2008.

chrisgriner said...

I've looked for a solution to this for about an hour now. Why is nothing ever straight forward from microsoft? Anyway, thanks for the post, it answered a lot of questions I had.

Remote Desktop Logon Prompt = Fail

Glad installing sp3 fixes that. The only problem, in our situation I cannot run SP3. I wonder if anyone has figured out how to roll back from rdp 6.0...

Anonymous said...

wonderful, thank you :)

Anonymous said...

THANK YOU!!!!!!!!!!!!!

It was driving me insane

Foyjur Razzak said...

it says that terminal server certificate is expired what should i do

Foyjur Razzak said...

it says that Terminal Services Gateway (TS Gateway) server' certificate is expired what should i do now

Wobblyheed said...

You are a legend - couldn't connect from W7 client to W2K8 Server host. This worked perfectly!

Tarvinder Singh said...

Suc a great article. I have been struggling with Windows 7 as it asks for Credentials prompt and I need to wait for long time to establish full connection to server just to check the RDP status of it ! So this is so much helpful!