New site publish: Remote Desktop from Windows XP to Windows Server 2008 or Windows Vista
But what about Windows XP SP2? Is there something that can be performed to connect to Windows 2008 (with network level authentication) not having possessing to upgrade to SP3?
But what about Windows XP SP2? Is there anything at all that can be achieved to connect to Windows 2008 (with network level authentication) without the need of owning to upgrade to SP3?The Remote Desktop connection settings for Windows Server 2008, and I presume Windows Vista, contains 3 amounts of services: Don’t allow connections to this computer
Allow connections from computers running any version of Remote Desktop (less secure)
Allow connections only from computers running Remote Desktop with Network Stage Authentication (more secure)
At first blush, you would probably choose the “more secure” option. Practically, this mainly means that it only allows connections from the latest Remote Desktop software in Windows Vista. It is probably another attempt by Microsoft to force consumers and businesses into upgrading to Windows Vista. But… I digress.
When connecting with an older Terminal Services (TS) client in XP or even Vista, you will get this message:
“Remote computer requires Network Level Authentication, which your computer doesn’t support”
Not all is lost. There are two ways around this. The first and most obvious solution is to select the less secure option and disabled Network Level Authentication (NLA). If you are in an environment that does not allow this change, or there are some other circumstances where you need to keep Network Stage Authentication enabled, you can get a Remote Desktop connection from Windows XP.
The first step is to download the latest Remote Desktop Client for Windows XP. As of the writing of this article, the latest version is 6.1.
For XP SP3: here
For XP SP2: here
That is not it. For XP, you need to enable CredSSP – Credential Security Service Provider.
CredSSP is a new Security Services Provider (SSP) that is available in Windows XP SP3 by using the Security Services Provider Interface (SSPI). CredSSP enables a program to use client-side SSP to delegate user credentials from the client computer to the target server.
Directions on how do do this are available at Microsoft here:
The quick and dirty summary: Click Start, click Run, type regedit,
discount microsoft office 2010 x86, and then press ENTER.
In the navigation pane, locate and then click the following registry subkey: In the details pane, right-click Security Packages, and then click Modify.
In the Value data box,
office 2010 Professional generator, type tspkg. Leave any data that is specific to other SSPs, and then click OK.
In the navigation pane,
microsoft office 2010 Professional x64 key, locate and then click the following registry subkey: In the details pane,
win 7 home premium activation, right-click SecurityProviders,
microsoft office pro plus 2010 x86 key, and then click Modify.
In the Value data box, type credssp.dll. Leave any data that is specific to other SSPs, and then click OK.
Exit Registry Editor.
Restart the computer. For more information on CredSSP including how to deploy this setting using Group Policy, see the CredSSP page here.
Let me know if you have any other tips or a simpler way to connect to the more secure version of Remote Desktop. Short URL: blog page comments powered by Disqus