For what it is worth I was having this issue with a Windows 7 SP1 x64 machine RDPing to a Window Server 2008 R2 SP1 Datacentre. I could logon locally, but not with a domain account.
The domain account was not locked, RDP was set to use Network Level Authentication, routing was set correctly, etc.
The issue was related to the cached account on the server. As soon as I deleted the cached credentials I could login without issue.
Here is another solution, looks like this issue is caused by different scenarios, in my case I was still able to logon with my Domain Admin account to a locked down machine(with very tight Domain Security Policies), the issue started happening on another account that was a local admin on the machine but I had flagged that account on the domain to prompt for a password change on the next logon, my guess is due to the security policies applied to this specific machine, the Security Authority was being blocked from properly communicating with the Domain Controller and it could not initiate the password change procedure and it was returning that error. All I had to do was uncheck the "User must change password on next logon" checkbox in the domain account and then it allowed me to logon with it.
Again this might be in my case, but in other cases it could be due to different configurations, I personally believe that for the most part this issue is due to security policies being applied to the machine, if you are not sure if that is the case and have tried all these solutions, you can always try to restore the machine security policies to the default state.
Hope this helps.
Hi AndyD77,
Please go to AD and check the particular computer account is enabled or disabled. Most probably it is disabled, so please enable that computer account.
Just remove the machine from Domain and remove the system name from AD computer list after all you just restart the system then add the system again in the domain.
Add the Remote Desktop Users group to the group policy setting Access This Computer From the Network.
By default only Administrators are allowed this right. If you are using the Network Level Authentication option then the Remote Desktop Users group must have this right for logon to work.
I ran into this issue when i had "do not connect if authentication fails" enabled, which from what i've read tries to connect through TLS, which if you dont have a compatible certificate installed on both ends, gets automatically rejected.
This can also be set in group policy settings, which i believe overrides the RDP setting.
hi
im having same issues, i have 2 pc local both windows 7 ultimate. pc1 is not on domain, pc2 was on the domain, uses password which is saved in the rdp.
from pc1 trying to rdp pc2, was able to do for long time but not recently. tried all kind of tricks,
i ve installed teamviewer so i can check if really i can connect,so with teamviewr (tv as short) from pc1 to pc2 i can logon.
as soon i connect with tv from pc1, then i try rdp from pc1 to pc2 and Bingo! it works. i close tv, rdp connection stays. i can rdp again and again AS LONGER I dont switch off pc2!!! if i do,im unable to connect via rdp!
looks like security issues, but establishing a connection with tv, it removes these issues and then rdp works! (tried every time!)
need a permanent solution though...
thanks.
I ran into this tonight but was able to solve it.
symptom:
From vpn based Windows 7 64-bit (Laptop/remote). I attempted to login to Windows 7 32-bit desktop (Office) using a specific domain account intended for the office computer only.
An Authentication error has occurred. The Local Security Authority cannot be contacted. Remote computer: Office
Solution:
Use a domain account that does not have a "Log onTo..." specified in the Account settings. Alternately add both Laptop/remote and Office to the domain user account intended for the office computer only.
Are you on a domain network? If so, I had this error. Found out someone else had changed the DNS servers to OpenDNS and not the IP of the AD/DNS server. Problem fixed!
I was getting the "The Local Security Authority cannot be contacted" when connecting from XP to a Windows 7 machine. I had updated the Remote Desktop client software through KB 969084. Don't make this update if you need to access win2000 systems as they are not supported.
I have the firewall turned off for testing purposes, so that wasnt the issue. I applied the CSSP Fix under XP(listed in the KB) and rebooted the XP system, though that may not have been necessary.
It turns out I had almost everything correct.
After reading Osman's solution above, I connected to the remote system though an alternate remote connection method, and added a password to the account.
There should be a note added that the destination account must have a password for RDP to work under Windows 7.
Once the password was added I was able to connect using the Enhanced Security with no errors.
Hello everybody!
Yesterday I spent my time on solving this issue. Thankfully I solved it. Now with great pleasure I would like to share with you.
First:
Go to System - Remote setting (in the left pane of the window) - underRemote Desktop select Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)and click OK.
Then you will set a password for you account, this is a required procedure. To set password go to:Start - type User Accounts select Create a password . I recommend to make a strong password because your computer now allow remote connections.
Next, unblock the Remote Desktop in your Firewall. Open your firewall (depending which security software is installed on your computer) findRemote Desktop and set it to By application rule or Allow .
OK, first preparation step is ready.
Now, let's go to second final step.
Run Remote Desktop Connection .
In the Experience tab select your connection speed. Go back toGeneral tab, in the Computer: type the full name of a remote computer to which you going connect, and then clickConnect button. (You can view a computer full name in System propertiesunder Computer name, domain, and workgroup settings. )
Then the new window will pop-up (Windows Security) here you must enter you credentials.
Please READ further instructions carefully.
In the new (Windows Security) window select Use another account , then type theUser name and Password OF your remote computer and click OK button. Probably then you will receive the Warning message select OKor Allow.
Wait a little bit and then you will see you Remote Desktop.
That's it.
I hope this instructions will help you to solve Your problems of Remote Desktop setup.
So, Good Luck to You!
Best regards,
Osman.
I had this issue pop up on my 2008 R2 server after importing group policy settings to the Default Domain Controller Policy
Basically it seems to have something to do with security rights.
The parts edited were under computer policy "User Rights Assignments" or "Security Options"
I'm not sure the exact one, but I'm guessing it has to do with logging in remotely.
I also have the "An authentication error has occurred. The Local Security Authority cannot be contacted" issue. I'm not very technical and I could not follow the info at the link in the above post marked "Answer."
In looking at the other possible remedies, I don't think a password is required on my account - if a password were required, would that mean I would have to use password every time I start Windows? And how do I know if my PC is part of a domain?
As a non-technical person, I hesitated to infiltrate a technical forum, but I have been trying everywhere to find a remedy for this issue so I would be very grateful for anyone's help.
That may work for one pc but I have many that are having this problem as I rollout Windows 7. Has anyone actually found a fix for this problem?
I had the same issue connecting to a machine that was part of a domain. The password of the domain account I was trying to connect was not expired.
What worked for me eventually was removing the computer from the domain logged in as a local admin (by changing it back to a workgroup), and then re-join the domain. [I did the join workgroup, re-join domain without a restart, and only did a restart at the end].
After that I was able to login via RDP using the domain account again. ;)