1

Let me start by saying I fully understand the purpose of Network Level Authentication, its benefits, etc...

I am trying to find a way to connect to a Windows 7 box from another Windows 7 box without using NLA. This is for a proof of concept I want to perform. The target machine is set to accept connections from all RDP versions. The problem is that the Remote Desktop Client dosen't seem to have an option for a non-NLA only connection.

Is there a way to force it to connect without NLA? Could I install an older version of the RDP Client that dosent support NLA next to my current version? Is there a third party program that would suffice?

UPDATE:
I found an old copy of mstsc 5.2 which dosent support NLA. This works for my purpose and I can keep it on hand, but I'm still curious if there is a better way to work this. Thanks.

2

I believe the key to this is that modern RDP with NLA uses the CredSSP SSPI. So you might be able to pull this off if you can disable the CredSSP provider, perhaps just for that particular RDP session by putting something like this in an *.rdp file:

[connection-file.rdp]
enablecredsspsupport:i:0

RDP Settings for Remote Desktop Services in Windows Server 2008 R2 (technet.microsoft.com)

  • It's insane this isn't a GUI option or a switch anymore in the RDP7 client! – Jon Kloske Sep 4 '14 at 2:09
  • Why would MS include a GUI element that would, in essence, be a "click here to make this connection less secure" checkbox? – Ryan Ries Sep 4 '14 at 2:14

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.