Hi, I have no problem with Guacamole, i use many RDP without problem.
If i use a user with "Protected Users" (Native group AD), it's not fonctionnal. If the NLA is disabled and security mode is "empty", i have a return of my RDP and i can enter the credentials and all are OK. I will remove the NLA from my servers. The "Protected Users" group blocks CredSSPs, which is why there is a blockage. Thierry TESTANIER -----Message d'origine----- De : Nick Couchman [mailto:[email protected]] Envoyé : mardi 28 septembre 2021 13:43 À : [email protected] Objet : Re: Information on GUACAMOLE-1426 On Tue, Sep 28, 2021 at 2:36 AM testanier thierry <[email protected] <mailto:[email protected]> > wrote: Hi, I opened a ticket and got an answer super quickly (GUACAMOLE-1426 <https://issues.apache.org/jira/browse/GUACAMOLE-1426 <https://antiphishing.vadesecure.com/2/dGhpZXJyeS50ZXN0YW5pZXJAY2hpLWVsYmV1Zi1sb3V2aWVycy5mcnxWUkMxMzUwNTcw/issues.apache.org/jira/browse/GUACAMOLE-1426> > ) The answer concerns a patch of my RDP server but I don't know what it is. is it possible to have more information? The answer wasn't about patching your RDP server. The error you were receiving was: > guacamole guacd[61734]: RDP server closed/refused connection: Access denied > by server (account locked/disabled?) This indicates that 1) Guacamole is working fine, and 2) the RDP server is rejecting the connection. My answer was that you need to "fix" the issue on the RDP server side, but in this case "fix" is not the same as "patch." You need to determine why the RDP server is rejecting access and fix that. The error message gives you a couple of hints about possible reasons - account locked or disabled - but there are several possibilities I can think of: * The user is not a member of a group allowed to make RDP connections (on Windows, this is generally Administrators or Remote Desktop Users). * The account is disabled, locked, or expired. * The account is already logged on, and is limited to a single session. * On Windows, licensing is incorrectly configured and the server is rejecting connections. I'm sure there are other potential reasons. The point is, Guacamole is functioning and can talk to the RDP server, and the RDP server is rejecting the connection. There isn't anything further to look at in Guacamole, you need to investigate on the RDP server why it is rejecting the connection and make the appropriate configuration changes to allow the account to log in. -Nick --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
