Can't connect to Microsoft RDP cause to NLA

Resolved

Can't connect to Microsoft RDP cause to NLA

avatar

Hi,
I have a Mac with MacOS 26, i use Remote Desktop Manager 2025.3.8.5, when i try to connect to a Microsoft RDP session, i have an authentification error due to NLA.
On our Windows Server we must enable "allow connections from remote desktop using NLA" due to our Administrator request, how can i connect to my Servers with my Remote Desktop Manager on Mac?
Thanks

All Comments (5)

avatar

Hello

You have the option "Enable Network Level Authentication (NLA)" in the RDP session properties (under the "Authentication" tab). This should be selected by default, overall I'd be surprised if your issue is because of the server asking for NLA because it should be well supported.

What's the exact error message you get in RDM?

What would be really helpful, is to temporarily enable session logging as described here. Reproduce the issue and then send me the session log by PM.

Please let me know if something isn't clear or you have other questions

Kind regards,

Richard Markievicz

avatar

I have a short message with "account restriction" written.
Under Windows with RDM i don't have this kind of probleme, my entries are cloud sync

avatar

Hello

The session log would give a definitive answer, but an account restriction usually means the user is part of the restricted users group and the connection requires kerberos authentication.

Either:

  • In the RDP session(s) "Authentication" tab, change the SSPI > SSPI Module setting to "Portable"
  • Or, in Settings > Types > Remote Desktop (RDP) > Authentication change the SSPI Module setting to "Portable"


You can make either of those changes safely in a shared data source.

This depends on the KDC server (usually the domain controller) being resolvable on your machine by DNS. If that's not the case, then we may need to give that address to RDM explicitly. But start by changing that setting and if you still can't connect, please reply with a session log following the directions I wrote in my last post.

Please let me know if something isn't clear or you have further questions

Kind regards,

Richard Markievicz

avatar

Hi, sorry being late to answer.
That was that, i set SSPI to "portable" and it work right now.
Thank you

avatar

Hello

Excellent news. Please let us know if you have any further questions or problems.

Kind regards,

Richard Markievicz