ASA/OPA: RDP Connection to Windows Server Fails with Error "policy does not allow connection requests using saved credentials"
Sep 1, 2025
Advanced Server Access
Okta Classic Engine
Okta Identity Engine
Overview
When attempting to connect to a Windows Server via Remote Desktop Protocol (RDP) from Advanced Server Access(ASA) or Okta Privileged Access(OPA), the following error appears:
The server’s authentication policy does not allow connection requests using saved credentials. Please enter new credentials
The Logon Attempt Failed
Applies To
- Advanced Server Access (ASA)
- Okta Privileged Access (OPA)
Cause
The remote server does not allow the use of saved remote desktop passwords.
Solution
- On the remote computer, run the local GPO editor:
gpedit.msc - Go to the GPO section Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security.
- Locate and change the policy value Always prompt for password upon connection to Disabled.
