Tuesday, April 2, 2024

Login to non-domain computer from a domain member computer

The Problem:

On Microsoft Windows 11 (maybe older windows too), that is a member of a domain, when using the Remote Desktop Client to login to a remote computer that is not a member of a domain, it keeps asking for the remote password. Either that, or it asks for the Windows Hello login (PIN), and then asks for the password, every time you connect, even if you check the checkbox to remember (i.e. save) the login credentials.

The Solution:

I found a nice way to get around the "problem" described above, by using the CmdKey command-line tool. The solution is to use the CmdKey command-line tool to add a "generic" login credential, replacing the "domain" login credential. After doing that, Remote Desktop Client starts to automatically log me into the remote computer, without going into a loop, asking for the password, or asking me to type the PIN and then the login/password every time I connect.

Here are the steps to replace the "domain" login credentials with the "generic" login credentials:

1. List all saved remote desktop credentials:

> cmdkey /list:TERMSRV/*

2. Delete credential for the target server <targetname>:

> cmdkey /delete:TERMSRV/<targetname>

3. Set generic credentials for the target server <targetname>:

> cmdkey /generic:TERMSRV/<targetname> /user:<username> /pass:<password>

4. List all saved remote desktop credentials to verify the above changes:

> cmdkey /list:TERMSRV/*

Now, start Remote Desktop Client and connect to the target computer, and surprise! It connects and logs you in automatically.

Ref: Windows 11 22H2 - Can't use saved credential (see the answer by informatik01 dated Feb 19, 2023, 10:49 AM)