I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the Administrator group and NLA is enabled then user cannot connect.

I can only get user to connect one of the 2 ways:

  1. Either having the user setup as a standard user which causes problems with tasks which are already set up to run.
  2. Switch off Network Level Authentication, which allows the user to connect even as Administrator.

Is there something I am missing? This used to work normally up until recently. It is possible it is some Windows Update which messed something up. I am not sure what that maybe.

Thank You!

  • 1
    Is the Windows right 'Deny access to this computer from the network' configured? – Greg Askew Feb 1 '19 at 17:26
  • Thanks, I thought about that. It is not configured – user218076 Feb 1 '19 at 17:35
  • Local account or domain account? – Greg Askew Feb 1 '19 at 17:42
  • Local. No domain set up – user218076 Feb 1 '19 at 18:11
  • 3
    There was a known issue with the January cumulative update that might be causing your problem, it was fixed by KB4487345, do you have that installed? – Harry Johnston Feb 2 '19 at 1:06

This is caused by a known issue in the January 2019 cumulative update:

Local users who are part of the local “Administrators“ group may not be able to remotely access shares on Windows Server 2008 R2 and Windows 7 machines after installing the January 8th, 2019 security updates. This does not affect domain accounts in the local "Administrators" group.

The resolution is to install KB4487345.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.