Windows 2008R2 RDP only works for Standard User but not for an Admin User

Question

I have an issue which I cannot figure out. We have a Windows server 2008 set up. The user is setup to allow remote desktop and is a part of the Remote Desktop Users. When user is also part of the Administrator group and NLA is enabled then user cannot connect.

I can only get user to connect one of the 2 ways:

Either having the user setup as a standard user which causes problems with tasks which are already set up to run.
Switch off Network Level Authentication, which allows the user to connect even as Administrator.

Is there something I am missing? This used to work normally up until recently. It is possible it is some Windows Update which messed something up. I am not sure what that maybe.

Thank You!

Is the Windows right 'Deny access to this computer from the network' configured? — Greg Askew, Feb 01 '19 at 17:26
There was a known issue with the January cumulative update that might be causing your problem, it was fixed by KB4487345, do you have that installed? — Harry Johnston, Feb 02 '19 at 01:06
@HarryJohnston Thanks! That fixed the problem. Should I post this as an answer? — user218076, Feb 05 '19 at 04:59
@user218076, I've posted an answer. You can accept it if you wish. — Harry Johnston, Feb 05 '19 at 05:27

score 1 · Accepted Answer · answered Feb 05 '19 at 05:26

This is caused by a known issue in the January 2019 cumulative update:

Local users who are part of the local “Administrators“ group may not be able to remotely access shares on Windows Server 2008 R2 and Windows 7 machines after installing the January 8th, 2019 security updates. This does not affect domain accounts in the local "Administrators" group.

The resolution is to install KB4487345.

Windows 2008R2 RDP only works for Standard User but not for an Admin User

1 Answers1