Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

At our office, any of our Windows 7 Clients get this error message when we try and RDP to a remote W2K8 Server outside of the office :-

Your system administrator does not allow the user of saved credentials to log on to the remote computer XXX because its identity is not fully verified. Please enter new credentials

enter image description here

A quick google search leads to some posts they all suggest I edit group policy, etc.

I'm under the impression, that the common fix for this, is to follow those instructions -per Windows7 machine-.

Is there anyway I can do something via our office Active Directory .. which auto updates all Windows 7 clients in the office LAN?

share|improve this question
Group Policy IS the way to use Active Directory to fix this. You just need to edit that group policy through AD an not on your local machine. Careful experimenting on a live network, If you don't know what you are doing you can hose things up – uSlackr Jun 8 '12 at 11:18
I did that. Didn't work on my client :( I tried to the for force update -and- rebooted my client win 7 box. is there a way i can confirm that the client win 7 box has been 'updated' ? – Pure.Krome Jun 8 '12 at 12:52
Yes, two ways. Take a look at the gpresult command or run mmc and add the resultant set of policies snap-in. – uSlackr Jun 8 '12 at 12:54
gpresult command ?? – Pure.Krome Jun 8 '12 at 12:55
yes. Type it in at a command prompt – uSlackr Jun 8 '12 at 13:09
up vote 17 down vote accepted

Here is a link on how to accomplish this:

Update 4 setting in the group policy editor in Windows 7.

This security measure could frustrating when you connect and disconnect a lot to the same (or many) terminal server. To get rid of it and to be able to use saved credentials in this situation you need to configure the following:

Go to Start -> type: gpedit.msc -> in the console configure the following:

enter image description here

Enable the each shown policy and then click on the “Show” button to get to the server list and add “TERMSRV/* to the server. In my case it’s ‘*’ which indicates that cached credentials will be allowed to all servers.

enter image description here

The last thing to do is refreshing policy. To do that just go to command line and type: gpupdate /force

That’s it. Now you can connect to your terminal servers by just clicking on .rdp files.

share|improve this answer
Welcome to Server Fault - we generally discourage "link only" answers here. Please update your answer to include enough information to allow someone to solve the problem if the link goes dead. Thanks! – voretaq7 Dec 4 '12 at 17:38
Despite being a 'link only' answer .. it still works!! WooT! – Pure.Krome Dec 5 '12 at 4:44
So how do I contact this It seems like the server is dead. Lucky you... Moving to strike this answer if I cannot follow the link in a day or two. – Fiasco Labs Sep 8 '13 at 2:21
@FiascoLabs - the link appears to work, I'll edit Zak's answer with relevant detail so that the link won't matter in the future. – TheCleaner Nov 8 '13 at 14:21

If you don't want to change local or server side GPOs:

Go to Control Panel -> Credential Manager. You will see three sections:

  1. Windows Credentials
  2. Certificate-Based Credentials
  3. Generic Credentials

Remove the credentials from Windows Credentials and add it to Generic Credentials.

share|improve this answer
Brilliant solution. Confirmed working with Win8.1 client and Server2012R2 remote host. – Chris Marisic Dec 2 '15 at 21:15
This should be the top answer, simple solution and I don't need to modify GPO (which gets overwritten at log on at my work) – neilsimp1 May 11 at 18:11

I had the same problem . What i did in my Windows 7 client is that " I removed the credentials saved for that Remote machine under Windows credentials and Added same credentials under Generic Credentials "

Issue resolved

share|improve this answer
This is the same as the other answer above. – slayernoah Nov 13 '15 at 20:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.