Score:1

Server

Encryption type requested is not supported by the KDC

Riguez

12/7/23, 4:13 PM

I am having intermittent issues with RDP'ing from a Windows 11 Enterprise PC to another Windows 11 Enterpise PC.

Both PC's are domain joined and on the same subnet.

Both PC's have a GPO applied to enforce:

Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'

Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'

Set client connection encryption level' is set to 'Enabled: High Level'

This is the error I get when RDPing. Rebooting the remote PC fixes this sometimes. I do not get this error when RDP'ing from a different Windows 10 Enterprise PC at a different site that is authenticating to a different Domain Controller.

[ RDP Error][1]

This is the negotiation captured by wireshark when the failure occurs.

This is the response captured by wireshark when the failure occurs.

This is the request captured by wireshark when the connection succeeds.

This is the response captured by wireshark when the connection succeeds.

If anyone could point me in the right direction or what to look at I would really appreciate it.

8002

1 + 1

security

windows

kerberos

authentication

windows-11

user1686

12/8/23, 5:53 AM

Do you have a capture of the Kerberos requests (on udp&tcp port 88)?

Score:2

Server

Bernd Schwanenmeister

12/7/23, 9:13 PM

The november security updates introduced bugs in kerberos that may be the reason for this behavior. You should install the out-of-band updates on your DCs that are meant to correct those. I had similar RDP problems that were solved by installing the updates. See https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/november-2022-out-of-band-update-released-take-action/ba-p/3680144

+ 2

Riguez

12/8/23, 3:11 PM

Looks like we are missing that KB. Going to install it and test to see if that is the issue. Thank you

Riguez

12/9/23, 1:06 PM

This seems to have fixed my issue along with a couple other problems I was experiencing. Thank you again!

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Encryption type requested is not supported by the KDC

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.