Why Does the System Display a Message Indicating Invalid Credentials When I Attempt to Access a Windows ECS?

Symptom

When you use a local PC running Windows to access a Windows ECS using RDP (for example, MSTSC), the system displays a message indicating that the credentials are invalid.

Solution

Perform the following steps to rectify the fault. After completing each step, try to access the ECS to check whether the fault is rectified. If the fault persists, go to the next step.

Step 1: Change Network Access Policy

Step 2: Modify Credentials Delegation

Step 3: Set the Credentials of the Local Server

Step 4: Disable Password Protected Sharing

Step 1: Change Network Access Policy

1. Log in to the ECS using VNC on the management console.
2. Choose Start > Run. In the Run dialog box, enter gpedit.msc and click OK to start Local Group Policy Editor.
   Figure 1 gpedit.msc
   
3. Choose Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options and click Network access: Sharing and security model for local accounts.
   Figure 2 Locating the network access policy
   
4. Select Classic - local users authenticate as themselves and click OK.
   Figure 3 Changing the network access policy
   

Step 2: Modify Credentials Delegation

1. Log in to the ECS using VNC on the management console.
2. Choose Start > Run. In the Run dialog box, enter gpedit.msc and click OK to start Local Group Policy Editor.
3. Choose Computer Configuration > Administrative Templates > System and locate Credentials Delegation.
   Figure 4 Locating the network access policy
   
4. Double-click Allow Delegating Saved Credentials with NTLM-only Server Authentication and click OK.
   Figure 5 Allow Delegating Saved Credentials with NTLM-only Server Authentication
   
5. Select Enabled and enter TERMSRV/* in the Show Contents text box. TERMSRV/* indicates the terminal server running on all computers.
   Figure 6 Enabled
   
6. Refresh the group policy for the settings to take effect.
7. Choose Start > Run. In the Run dialog box, enter gpupdate /force and press OK to update the group policy.
   Figure 7 Updating the group policy
   

Step 3: Set the Credentials of the Local Server

1. Open the control panel on the local server and choose Credential Manager > Windows Credentials.
   Figure 8 Credential Manager
   
2. Check whether the credential of the target ECS is contained in the Windows credentials. If there is no credential, add one.
   • Internet or network address: IP address of the ECS
   • User name: Username for logging in to the ECS
   • Password: Password for logging in to the ECS
     Figure 9 Add a Windows Credential
     

Step 4: Disable Password Protected Sharing

1. Log in to the ECS.
2. Choose Start > Control Panel > All Control Panel Items > Network and Sharing Center > Change advanced sharing settings.
3. In the Password protected sharing pane, select Turn off password protected sharing.
   Figure 10 Turn off password protected sharing
   
4. Click Save changes.