webRDP cannot connect to workstations due to NLA

webRDP cannot connect to workstations due to NLA

Issue

ActiveX and WebRDP clients cannot connect to Windows workstations.

Possible Errors:
  • The remote computer has ended the connection.
  • The server reset the connection.
  • Parameter(s) you provided caused an error.
  • The server requires that the client support Enhanced RDP Security with CredSSP.
  • Received an error connecting to: <CN_OF_WEBAPP>


Solution

Windows RDS has an option called Network Level Authentication under the Remote Desktop Connection settings.

When this option is checked then only RDP 6 or higher RDP clients can connect. This excludes the Microsoft ActiveX RDP control and the Java Proper RDP Client.

To connect using the webRDP HTML Client, you must pass the username, password, and domain as part of the initial connection/handshake.  NLA performs user authentication before actually completing a full RDS connection.  It basically tests the user's credentials to make sure they are valid before establishing an RDS connection.

This means that you cannot initiate a generic RDS connection to the login screen, requiring the user to then manually enter their credentials.  To setup a RDS application that brings up the Windows login requires disabling NLA on the host workstation/server.

To disable NLA on the workstation:
  1. Access the workstation's System Control Panel.
  2. Select Remote settings.
  3. Uncheck the box for Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended).
  4. Click OK.

    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...

      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...

      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...

      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...

      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...

      • Related Articles

      • webRDP cannot connect to new Windows 10 workstations / Windows Server 2016 servers

        Issue The HTML5 webRDP client will not connect to new Windows 10 workstations, but will connect to Windows 7 or Windows 8 workstations. Possible Errors: Received an error connecting to: <CN_OF_WEBAPP> Solution Clean installations of Windows 10 now ...

      • Number of connections for webRDP Client

        Question: How many RDP connections can my users make, through Unified Workspace, using the webRDP client? Solution: As the webRDP client is very resource intensive, for the UW relay server, we've found that the each relay can handle approximately ...

      • webRDP Java Client URL

        Question Is there a way to troubleshoot webRDP connections? Solution Customer's can download the webRDP.jar file from their cloud, to assist with troubleshooting webRDP connections. The jar can be downloaded ...

      • Parameters for webRDP

        What are the options for webRDP java client when used inside webNetwork for terminal services connections? colordepth  8 (hundreds of colors)  16 (thousands of colors)  24 (24 bit color)  32 (millions of colors)  screenheight  screenwidth  keepalive

      • webRDP HTML5 Client use LongPolling instead of webSockets

        The webRDP HTML5 Client uses the webSocket protocol to provide efficient communication between the client workstation and the webNetwork server.  There are some instances where webSocket cannot be used due to the webNetwork relay being placed behind ...