Windows remote Desktop with PIN

Hey,

I just pushed Windows hello for Business to myself for testing. It works great except when I have to enter admin credentials or RDP. It default asks me for a Pin and says wrong password.

I enabled all the settings in the RDC but now I get a "The client certificate does not contain a valid upn" error.

Any ideas?

When I try to connect to an intranet machine, it only works if I specify domain credentials. When I use Windows Hello pin, it fails with this message:

An authentication error has occurred [Code: 0x8007013d] Remote computer: theremotecomputername

Additional information:

• Client is running Win10 enterprise. I can use the Windows Hello PIN normally for login into client and for applications. Only RDP fails.
• Remote computer can be either Win10 enterprise or Win2016 server. Both fail.
• Client and remote are domain-joined and I am admin of these computers [I'm not domain admin].
• I can connect to remote with domain credentials, however any application that requires a PIN in the remote computer fails.

asked on Server Fault Jan 23, 2019 by fernacolo

User contributions licensed under CC BY-SA 3.0

• For the username, try:

  AzureAD\Username

  Spice [1] flagReport
  Was this post helpful? thumb_up thumb_down

• Did you try putting in the PC name as part of the username?  COMPUTERNAME\USERNAME

• I tried now but it is still not working, what i dont mentioned i have also 2FA but it is not asking to enter password from authentificator, this is why i was thinking i should generate an app password.

  
  

• I think with the computername\username is not the case because i am using micorost account, it tried now to user computername\msn account it gives me the same error

• You also may need to add the following to your .rdp file:

  enablecredsspsupport:i:0authentication level:i:2

• Specify

  microsoftaccount\youremailaddress
  

  You may have to use your MS password, not the machine PIN.

• after setting the ones what you mentioned i got this error

• I am trying to you my msn password from my account, what works on the microsoft website, i can log on with e-mail adress and password.

• You need to disable the NLA Requirement on RDP

  Why allow connections only with Network Level Authentication?

  If you want to restrict who can access your PC, choose to allow access only with Network Level Authentication [NLA]. When you enable this option, users have to authenticate themselves to the network before they can connect to your PC. Allowing connections only from computers running Remote Desktop with NLA is a more secure authentication method that can help protect your computer from malicious users and software. To learn more about NLA and Remote Desktop, check out Configure NLA for RDS Connections.

  If you're remotely connecting to a PC on your home network from outside of that network, don't select this option.

  
  

• I do not have an answer, but I have some input on this issue. One thing I have tried and works, and a few others that do not work.

  I have one machine that I created a local account, then logged into my Microsoft account. This machine has NLA enabled, and I can log into this machine remotely from multiple machines using only my Microsoft account email address and password. The path for this user is C:\Users\daniel.

  I have multiple machines which I logged into Windows using my Microsoft account email address during the Windows setup process [no local user created during setup]. All of these machines have a path of C:\Users\. I cannot remotely connect to these machines using my Microsoft account email and password.

  Seeing this difference, I created a new local account on one of my machines. I deleted my Microsoft-created user, then logged into my Microsoft account with the local user. This did not change anything.

  Once I have some time, I will setup a brand new instance with a local account and try this again.

• I finally found the issue. You cannot seem to use a 'Windows Hello' login type [face, PIN, etc.] on Windows 10 or 11 through Remote Desktop.

  I disabled my PIN and then I was able to log in using my Microsoft account password.

Frage Microsoft Windows 10

13778

5

0

Guten Tage Leute , Ich nutze für mein Windows 10 Pro für die Anmeldung einen Pin . Das Windows ist mit einem MS Konto Verbunden. Meine Frage ist es möglich wenn ich mich auf den Pc per RDP verbinden möchte das ich dort entweder per MS Konto bzw per Pin mich anmelden kann?

Bitte markiere auch die Kommentare, die zur Lösung des Beitrags beigetragen haben

Content-Key: 379890

Url: //administrator.de/contentid/379890

Ausgedruckt am: 15.03.2022 um 18:03 Uhr

Heiß diskutierte Beiträge

Hi jseidi,

According to your description, I consider that it may be related your password is wrong. I could RDP when I type the password. Because you know the pin, so I suggest you reset your password, and then RDP connect again to see.

Forgot Windows 10 Login Password But Remember PIN

//www.isumsoft.com/windows-10/forgot-windows-10-password-but-remember-pin.html

Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope it will be helpful to you

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact .