Users cannot log into Remote Desktop after 3/11/2015 update!

I have a simple network where users can log into a Windows SBS 2008 server with Remote Desktop to access various applications.  This worked quite smoothly until this morning, after the updates of last evening. (3/11/2015)
When users tried to log into the Remote Desktop this morning their credentials were rejected, as if their username and/or password were incorrect.  Even I (as the administrator) could not log in remotely.  Finally I connected a monitor and keyboard
directly to the server and was able to log in without an issue.  After logging in directly I was able to connect through remote desktop.
This method worked for my other users as well - after I logged them in directly they were able to use remote desktop no problem.
The trouble is that I have a couple dozen users, and this is an issue that should not be occurring.  What happened in the last update to cause remote desktop to reject users credentials?  Why does it only work after the user logs in directly? 
And most importantly, how do I fix this?
A few notes:
Simply browsing for files on the server also asks for the user's name and password, and this works as well.  This is only a remote desktop issue.
I have already checked to make sure the domain was correct.  It was.
I have already checked to make sure the usernames and passwords were correct.  They were.
I have already checked to make sure this was not a unique issue for a single (or limited number) of users.  This issue effected
all users all the network.
Thank you very much for your help,
Dustin

I'm curious here...  If the server is rebooted, does it put the RDS users back into a "credentials failed" situation?  If so, could you please have them log in with credentials:
domain.local\username    (I suspect they may be currently using domain\username)
and see if that fixes the RDS problem without having to first log into the server directly.
 The ".local" may be ".lan" or ".somethingelse" depending on how you initially configured your domain, but the default for SBS 2008 is ".local"
Merv Porter
=========================
That's a good question - the server will auto-reboot this evening and I'll test again in the morning. 
You are correct that we've been using domain\username.  I tried domain.local\username (which is the way we've set up), and that did not work either.
I'll let you know how things turn out tomorrow morning.  I don't want to mess with my users anymore today. :P
Dustin

Similar Messages

  • Win svr 2008 r2 ent - user can not log into remote desktop after installing march's 2015 important updates

    we installed march's 2015 important updates onto all of our servers.  three of our servers are not allowing RDP.  
    these servers have windows server 2008 r2 enterprise sp1  installed.  
    we enter in the username and password in the rdp dialog box and click on ok.  the rdp dialog box comes back for us to enter in the username and password.  
    we do have kb3046049 and kb3002657 installed.  
    is there a v2 of kb 3002657 for windows server 2008 r2 enterprise?  
    on one of the servers
    1. I disabled rdp
    2. stop and start the following services 
    remote desktop configuration
    remote desktop services
    remote desktop services usermode port redirector 
    remote procedure call
    3. enabled rdp
    4. added the users allowed to rdp into  server
    This allowed us to RDP into that box with the username and password.  
    But the other two servers the steps performed above did not work.  
    Any solutions for Win Svr 2008 R2  enter sp1?

    Thursday, March 19, 2015
    This is a summary of the new and changed content scheduled for release on Thursday, March 19, 2015.
    New security content:
    This has nothing to do with this issue in this thread, it just happens to have been published today and yet no kb is public.
    Security Update for Windows Server 2003 (KB3048051)
    Locale: All
    Deployment: Windows Update, Microsoft Update, Automatic Updates, WSUS, and Catalog
    Classification: Security Updates
    Target platforms: Windows Server 2003 and Windows XP
    Approximate file sizes:
    Windows Server 2003 update: ~ 196KB
    Description:
    Install this update to resolve an issue which requires an update to the untrusted certificate store on Windows systems and to keep your systems up to date. After you install this update, you may have to restart your system.
    http://support.microsoft.com/kb/3048051
    It is related to the SSL cert revocation and Microsoft is very lame these days and gets the code on MU but can't sync up the KB.
    See:
    * Microsoft Security Advisory (3046310)
    - Title: Improperly Issued Digital Certificates Could Allow Spoofing
    - https://technet.microsoft.com/library/security/3046310
    - Revision Note: V2.0 (March 19, 2015): Advisory rereleased to
    announce that the update for supported editions of Windows
    Server 2003 is now available. See Knowledge Base Article 3046310
    for more information and download links.

  • Logging into Remote Desktop

    I keep trying to log into remote desktop from my computer. The credentials are correct and work from other computers but every time I try to log in they say access denied. 

    Hi,
    I agree with that you may use the incorrect user account or format.
    You can try the following format.
    RemoteComputerName\UserAccount
    Or
    Domain\UserAccount
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • I cannot log into my immesage or facetime since i updated to iOS 8 help??

    I cannot log into my immesage or facetime since i updated to iOS 8 help??

    Just hang tight, these services are taking a while to catch up with the traffic on the servers right now. things should start working as the evening goes on.

  • User cannot log into ZCM Agent 11.3.1

    We just went through a domain migration. All PCs were unregistered from the old ZCM 11.2 server in the old domain before they were migrated. When we went to re-register them to the 11.3.1 ZCM server, we ran into 2 issues. Some of the systems successfully upgraded to 11.3.1 BUT users cannot log onto the ZCM 11.3.1 Agent. It's giving an error of "unable to log into the network because the login credentials or the server certificate is incorrect". The PCs that didn't not upgraded to ZCM 11.3.1 and are running 11.2.0 do not have this problem. They get authenticated appropriately. The User configuration is set to eDirectory (just like on the ZCM 11.2 server in the old domain).
    I ran "zac ci" and noticed there are old certificates from ZENworks servers that are no longer around. How do you get rid of these old references? It's picking up the new server's certificates. I ran this on my PC ZCM Agent 11.2 (won't upgrade and can authenticate into the ZCM 11.2 agent just fine) and I do not see the old certificates. I'm only seeing certificates for the new ZCM 11.3.1 server in the new domain and the eDirectory master server that the ZCM server is referencing.

    The old Trusts can be cleared using IE to managed the Trusted Root
    Stores. There are some other ways too.
    However, Having old ones should not be an issue unless the old and new
    Servers have the same name. Not 100% sure matching will cause an issue,
    but I think I have seen that before.
    It may be possible to automate the removal of the old trusts, but I
    would not worry about that until you verify it is an issue by manually
    fixing a couple and see if resolves your issue.
    Your issue may be something else.
    Reinstalling CASA is something else to try.
    On 10/9/2014 5:16 AM, hfr63 wrote:
    >
    > We just went through a domain migration. All PCs were unregistered from
    > the old ZCM 11.2 server in the old domain before they were migrated.
    > When we went to re-register them to the 11.3.1 ZCM server, we ran into 2
    > issues. Some of the systems successfully upgraded to 11.3.1 BUT users
    > cannot log onto the ZCM 11.3.1 Agent. It's giving an error of "unable
    > to log into the network because the login credentials or the server
    > certificate is incorrect". The PCs that didn't not upgraded to ZCM
    > 11.3.1 and are running 11.2.0 do not have this problem. They get
    > authenticated appropriately. The User configuration is set to
    > eDirectory (just like on the ZCM 11.2 server in the old domain).
    >
    > I ran "zac ci" and noticed there are old certificates from ZENworks
    > servers that are no longer around. How do you get rid of these old
    > references? It's picking up the new server's certificates. I ran this
    > on my PC ZCM Agent 11.2 (won't upgrade and can authenticate into the ZCM
    > 11.2 agent just fine) and I do not see the old certificates. I'm only
    > seeing certificates for the new ZCM 11.3.1 server in the new domain and
    > the eDirectory master server that the ZCM server is referencing.
    >
    >
    Going to Brainshare 2014?
    http://www.brainshare.com
    Use Registration Code "nvlcwilson" for $300 off!
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Technical Support Engineer
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • Cannot Log into AIM account after multiple tries

    This problem is a nightmare. I really do appreciate the support. Unfortunatly the fix is only temporary. Here is what is going on and what Fixes I have tried.
    The problem is on my parents G5 power PC (~2006)
    They have an AOL AIM account.
    Ichat worked great for about 4 months.
    Then the problems occurred (Can not log into AIM account after mutliple tries).
    We have tried:
    Switching to port 443 - this has not worked ever time we have tried it.
    Deleting iChat.plist, iChatAgent.plist, and iChatAIM.plist (left the other ichat plists alone like Jabber, Agent, Subnet,etc)
    This this restores ichat for about a day then back to the same problem.
    We have also tried running disk utlity and repairing permissions and get it going for day some times.
    Not sure what else is causing it to drop out and having to delete this times again and again? Any ideas?

    On the Netgear
    The Access IP is normally 192.168.0.1 and the User ID is admin and the password is password when the pop down appears.
    ----Under SYSTEM PREFERENCES>NETWORK It shows Airport Connected to "Netgear 192.168.1.3" do not see User ID or password on the screen?
    In the menu on the left the last (or near last item) is UPnP.
    Check this is Enabled.
    ----Do not see this listed anywhere
    About two thirds of the way down the menu is WAN Set up
    In hear Disable the Port Scan Line (It will read DOS (or SPI) and Port Scan)
    There is another Line about "Blocking Responses to Ping on the WAN port" this needs to be Disabled as well (IChat sends a Ping to confirm where the Visible Invite went to is where the SIP stuff (In the Log about the error) is coming back from).
    On the DNS info.
    This should be two IP address normally that are on the Internet.
    These should appear on the RCA if it is accessible in a web Browser but more likely on the Router's Set Up pages (or Some sort of Summary page).
    A 192.168.x.x address points to the Router (I would guess in this case) and whilst some routes can be DNS servers as well it is not that common and is only really useful to link a MAC (Ethernet and/or WiFi Card - Media Access Card Address) info to a Name for the Computers that are attached.
    ----Not sure where to find all this in OS 10.5.8
    ----Under System Preferences>Network with Airport highlighted I click advanced and go to TCP/IP is see two addresses the ipv4 = 192.168.1.3 and the router=192.168.1.1
    (I have presumed that there are no other DNS servers are listed and the 192.166 bit was a typo)
    ---Correct i put a typo as i was not sure if it was secure to post.
    If the Computer can do Wifi as well as Ethernet it should not have both Connected to the Router at the same time. (iChat "Sees" it as two Connections to the Internet).
    --- The computer is only connected via Airport to the netgear router.

  • Cannot log into my iCloud after resetting apple id password.

    I can't log into my iCloud after resetting apple id password. Any solutions for this?

    Need a little more info. You reset your Apple/iCloud ID, and you cannot log into iCloud where? What is the error?
    Cheers,
    GB

  • After software update, users cannot log into Xserve

    We have an Xserve running 10.6.7.  We just did an software update and rebooted the server.  Something broke and at this point, only local users can log in, such as the administrator account.  None of the users in the LDAP db can log in.  I cannot access their accounts from Workgroup Manager, either, because it posts an LDAP error.
    We do have a full backup of that drive from 24 hours ago, but don't want to just blindly overwrite the whole drive.  Are there specific files I could restore?
    Or, is there a way to correct what's wrong with LDAP?

    Sadly we are currently having problems with ldap and directoryservices after the 10.6.7 update. It is not the same thing you are seeing but none the less.
    My advice would be to get that backup up and running.  You could copy the backup to an external drive and try and boot off of it and see how that works if its ok I would revert back and hold off on updates.

  • I cannot log into firefox and after I try I cannot remove the firefox exe process

    I was uploading photos which didn't complete and after that I couldn't log into firefox. I tried the answers in the formats and deleted the parent control but cannot get to my firefox profile to add a new one to test if this will repair the situation. I am also not able to get updates for some of my security programs

    I'm having the same issues, running Firefox 3.6.
    After downloading Windows Updates for Vista, Hotmail has stopped working.
    I can log on, but can't click on any messages.
    None of the buttons work at all in Hotmail; it's completely frozen.
    I have to log on using Internet Explorer.
    I had the same problems with Firefox 4.0; Norton 360 wouldn't work properly with it, so I deleted it, and went back to Firefox 3.6.

  • Workspace User cannot log into workspace

    Hello Everyone,
    When I try to log into workspace as a user with Workspace User role, I get the following message "Access permission has not been granted to this user." and cannot log in.
    I have already added the user to principles with "INVOKE_PERM" permission for the specific application. But I still cannot log in as that user of Workspace User role. 
    Any help or suggestions for resolving this problem will be greatly appreciated.
    Thank you very much!

    Hi,
    you have given access to the user to invoke all operations on a service. You need to give login access.
    There are following ways to chieve this:-
    1:-In livecycle few default roles are created one of them is 'LiveCycle Workspace User'(Can log in to the     Workspace end-user application), assign this role to user.
    2:-Add the permission 'PERM_WORKSPACE_USER'(Log in to the Workspace end-user application) in your role and assign that role to user.
    Thanks
    Message was edited by: aks@lc

  • Cannot log into iTunes account after reinstalling Vista

    I just reinstalled Vista on my friends laptop, and now it wont let me log into iTunes. It just keeps saying that the network connection is down, and to check my settings. ANyone know what the problem is?
    COuld it be related to this:
    http://discussions.apple.com/thread.jspa?threadID=1698845&tstart=0
    Stuart

    On the Netgear
    The Access IP is normally 192.168.0.1 and the User ID is admin and the password is password when the pop down appears.
    ----Under SYSTEM PREFERENCES>NETWORK It shows Airport Connected to "Netgear 192.168.1.3" do not see User ID or password on the screen?
    In the menu on the left the last (or near last item) is UPnP.
    Check this is Enabled.
    ----Do not see this listed anywhere
    About two thirds of the way down the menu is WAN Set up
    In hear Disable the Port Scan Line (It will read DOS (or SPI) and Port Scan)
    There is another Line about "Blocking Responses to Ping on the WAN port" this needs to be Disabled as well (IChat sends a Ping to confirm where the Visible Invite went to is where the SIP stuff (In the Log about the error) is coming back from).
    On the DNS info.
    This should be two IP address normally that are on the Internet.
    These should appear on the RCA if it is accessible in a web Browser but more likely on the Router's Set Up pages (or Some sort of Summary page).
    A 192.168.x.x address points to the Router (I would guess in this case) and whilst some routes can be DNS servers as well it is not that common and is only really useful to link a MAC (Ethernet and/or WiFi Card - Media Access Card Address) info to a Name for the Computers that are attached.
    ----Not sure where to find all this in OS 10.5.8
    ----Under System Preferences>Network with Airport highlighted I click advanced and go to TCP/IP is see two addresses the ipv4 = 192.168.1.3 and the router=192.168.1.1
    (I have presumed that there are no other DNS servers are listed and the 192.166 bit was a typo)
    ---Correct i put a typo as i was not sure if it was secure to post.
    If the Computer can do Wifi as well as Ethernet it should not have both Connected to the Router at the same time. (iChat "Sees" it as two Connections to the Internet).
    --- The computer is only connected via Airport to the netgear router.

  • Help logging into remote desktop

    Hello - I newly downloaded the Microsoft Remote Desktop and believe I have all of my company's info entered correctly (an IT staff even verified it for me!), but I cannot seem to get things to connect.
    I keep getting this error message - 
    HTTPSGatewayEndpointException: ReadFromSubEndpointError(6)
    What does this mean? Is there anything in particular I should do to troubleshoot? Any help would be much appreciated!
    Kendall 

    Hi,
    Are you referring to Remote Desktop Client? And which device are you using, iPhone/iPad or Mac/MacBook?
    If it is iPhone/iPad, could you remote to the same target with an laptop with using same wifi? I'm thinking if it is the wireless connection which is causing the issue. You can confirm with your IT staff too.
    And if it is a macbook/mac, try to connect with a cable instead of using wireless connection to see the result.
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • One of our Team users cannot sign into CC desktop app on OS X 10.8.5

    Every time of our CC for Team users tries to sign into the CC app in OS X 10.8.5 he just gets a message saying "You have been signed out"
    In addition, on startup of his iMac he also receives continuous popup messages saying that admin rights are required (something along those lines) until he quits the app and starts it up again.
    CC app version is 1.7.0.413
    Today I tried completely removing the app using the uninstaller and even after reinstalling he gets the same sign in issue.
    Any ideas please?

    Just resolved this will online support chat...
    In case anyone else comes across the same issue, all you need to do to fix this in OS X is:
    quit CC app
    open terminal
    type: cd ~/Library/Application Support/Adobe/OOBE
    type: sudo rm opm.db
    relaunch CC app and it should be fixed

  • After upgrading to mavericks i cannot log into my VPN using RDC

    After upgrading to mavericks i cannot log into my desktop at work using Remote Desktop Connection for Mac
    I get a message that The computer i am triyng to connect to cannot establish my identity
    What to do?

    You don't need to go to the App Store to for support for Steam and Minecraft. You need to go to their website(s).
    You're welcome 

  • I cannot log into user account with old password after using migration assistant.

    I used Migration Assistant to move only my Settings and Users from my Power PC (User name RLE 5) to my Mac Pro.  Because of what I have read in these forums I did not migrate applications or and files/folders. I will do that manually.  After migrating I tried logging in to my user account RLE 5 on my Mac Pro, but it is telling me I am using the wrong password.  I used the same password I used on my Power PC, but with no luck.  On my Mac Pro I went into System Preferences>Accounts>RLE 5 account and changed the password.  I then rebooted and tried again.  No luck.
    Can somebody help me with this problem?
    Thank you.

    What you propose would not solve the problem I am having.  I must not have been clear about it.  So I will elaborate. 
    I have a Power PC with 10.5.8.  The admin user account name is RLE 5.  I need a password to log into my root user account on my Power PC. 
    Then I bought a used Mac Pro with a clean install of 10.7.5 and no password set up yet for my admin user account.  The admin user account name is Mac Pro.  When I turn on the computer it opens to my admin user account where I have access to everything. 
    I used Migrations Assistant to move my Settings and Users from my Power PC to my Mac Pro.  That seemed to to successfully. 
    So I now have four users on my Mac Pro:  RLE 5 (the admin user from my Power PC with the password), Mac Pro (my admin user which does not require a password), and two guest user accounts.
    I turn on my Mac Pro and it opens to my Mac Pro admin user account.  I don't need to sign in.  No problem. 
    I log out of Mac Pro.  On my screen are the four user accounts.  I click on RLE 5 (which was my admin user account on my Power PC that I migrated over to my Mac Pro) to log into that account and it asks me for a password.  I type in the password I used for my Power PC.  It keeps telling me it is the incorrect password.
    I cannot log into my user account RLE 5 on the Mac Pro.  I am being told I have the incorrect password. I've gone to System Preferences>Accounts and changed the password.  It doesn't make a difference. 
    Also I cannot log into the Guest User account that migrated from the Power PC to the Mac Pro for the same reason.  I have also tried to change the password for that Guest User account also but with no luck. 
    Another interesting thing has happened.  I decided to give my Mac Pro admin user account a password by going to System Preferences>Accounts.  But when I do a test to sign into my admin user account Mac Pro it tells me it is the wrong password.  Luckily I can reboot the computer and it opens to my Mac Pro user without asking for a password.  But if I log out of Mac Pro and try to then sign back in with the password it tells me it is the incorrect password.
    Any suggestions would be appreciated.

Maybe you are looking for

  • Wired Internet Access - Ethernet "Not Connected"

    Hi, I have a 15" MacBook Pro that is less than 6 months old that has suddenly developed a problem with the wired ethernet access. When I plug a cable into the laptop, it still says "Not Connected" for the ethernet adapter in Network preferences pane.

  • OBIEE Issue - Physical Query not picking cascaded Conditions

    In one the OBIEE Reports, I have given a set of NOT LIKE conditions as below: Session Name is not LIKE (pattern match) '%AUDIT%' AND Session Name is not LIKE (pattern match) '%audit%' AND Session Name is not LIKE (pattern match) '%Audit%' But when we

  • Save and Save As not working

    Hi everyone, I have been having problems saving in Photoshop CS6. When I click on the "Save as" button nothing happens, and I can only save as a jpeg if there is only the background layer. If there are any other layers, the save button also does noth

  • Unable to restrict a rolling char field in MDX Universe.

    Hello! I am trying to create a restricted Characteristic in a SAP BW OLAP Universe. The chararcteristic is a Quarter field and has to be restricted for some reports to not display the last quarter in a rolling quarter period.There are a few menthods

  • Three dependencies in BUILT time; software component;

    hi wants to knw why these three files are kept in BUILT TIME only while creating software components in SLD SAP-JEE, SAP_JTECHS, and SAP_BUILDT why cant these files be kept in INSTALLATION TIME & Other options any specific reason this files are kept