RDM can't connect to Windows Server 2022 with user in "protected users" group, error 0XC000006E ("user account restriction has prevented successful authentication")

Resolved

RDM can't connect to Windows Server 2022 with user in "protected users" group, error 0XC000006E ("user account restriction has prevented successful authentication")

avatar

RDM version: 2022.3.35.0
client system: Windows Server 2019 Datacenter (10.0.17763)
target system: Windows Server 2022 Datacenter (10.0.20348)

The user account trying to connect via RDP is a domain admin and therefore member of the "protected users" security group. This group prevents authentication via NTLM for all members.

The error message in RDM is identical to the one in Active Directory: "0XC000006E - Indicates a referenced user name and authentication information are valid, but some user account restriction has prevented successful authentication (such as time-of-day restrictions)."

Connecting from the same client to the target using mstsc.exe with the same user account is working properly. The problem only occurs when using an existing connection and credential entry in RDM for the rdp connection. Using the "quick connect" feature in RDM and entering credentials manually upon connecting also works fine.

Using saved credentials is also allowed on the target system and is working.

Is there some setting in RDM that i am missing here (switching from NTLM to Kerberos), or is this an issue to be fixed in a future release?

All Comments (2)

avatar

The simple solution was: connect to the target server using the FQDN instead of IP address. The connection using the domain admin user works now, no other settings had to be changed.

avatar

Hello,

Thank you for sharing the solution, glad it now works!

Best regards,

Richard Boisvert