Okta RDP Connection To Windows Server Fails With Saved Credentials Error
Last Updated:
Advanced Server Access
Okta Classic Engine
Okta Identity Engine
Overview
A Windows server policy restricting saved remote desktop passwords causes Okta Advanced Server Access (ASA) and Okta Privileged Access (OPA) Remote Desktop Protocol (RDP) connections to fail. Disabling the password prompt policy in the local Group Policy Object (GPO) editor resolves the issue. Attempting to connect to a Windows server via RDP from ASA or OPA fails and generates the following error:
The server’s authentication policy does not allow connection requests using saved credentials. Please enter new credentials
The Logon Attempt Failed
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Advanced Server Access (ASA)
- Okta Privileged Access (OPA)
Cause
The remote server policy restricts the use of saved remote desktop passwords.
Solution
How is the saved credentials error resolved?
Disable the password prompt policy in the local Group Policy Object editor on the remote computer.
- Open the local Group Policy Object (GPO) editor on the remote computer by running the following command:
gpedit.msc
- Navigate to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security.
- Locate the Always prompt for password upon connection policy and change the value to Disabled.
