- #SERVER 2016 REMOTE DESKTOP SERVICES DISABLE PASSWORD FULL#
- #SERVER 2016 REMOTE DESKTOP SERVICES DISABLE PASSWORD PASSWORD#
Change the Security Layer setting for the RDSH servers in the session collection from 'Negotiate' to 'RDP Security Layer'. Disable the NLA requirement for the RDSH servers in the session collection.Ģ. However, RDP Security Layer is the least secure security layer, so I am uncertain whether or not we will leave it this way, or just deal with users being unable to change their expired passwords.įor anyone else having this issue, who would rather relax the security settings to allow their users to be able to change expired password:ġ.
#SERVER 2016 REMOTE DESKTOP SERVICES DISABLE PASSWORD PASSWORD#
It appears that you must have both NLA disabled, and have your security layer settings for your RDSH servers set to 'RDP Security Layer', rather than 'Negotiate', in order for the user to be able to change their password at the logon screen as describedĪbove. Ten minutes after I wrote the post, I think that i found the issue.
Has anyone seen this happen in their environments with Windows Server 2016 RDSH servers before?Īfter hours of investigation and research, I wrote this post.
There are oRDSH servers in this environment, but the issue happens on both. The issue is not isolated to just a single 2016 RDSH server. It can be reproduced with any account that has an expired password. This issue is not isolated to any one user. One field to enter the old (expired) password, and two fields ** What should happen at step 4 (and what does happen on the 2008R2 RDS servers in the environment) is that the user will be brought to a logon screen, which would have three password fields. Or click the forward arrow, but will only be brought back to the same window as in step 3, and will go in circles this way. The user clicks OK, and is brought to the logon screen where the only fields are the username field (with the domain and username populated), and the password field (with the expired password already entered). "Your password has expired and must be changed"Ĥ.
What is displayed is the logon screen saying "Other User", with a message stating:
#SERVER 2016 REMOTE DESKTOP SERVICES DISABLE PASSWORD FULL#
The RDP session brings up the Windows Server 2016 full logon window.ģ. User connects to the Windows Server 2016 RDSH server via RDP, and enters their expired password in RDP Windows Security prompt (not quite at the logon screen yet).Ģ. Other servers in the environment running Windows Server 2008R2, with the same policies applied do not have the issue.ġ. We are currently experiencing an issue with a newly built Windows Server 2016 environment, in which users who have expired passwords cannot change their expired passwords at the server logon screen.
0 kommentar(er)
