Credential Guard blocking RDP saved credentials

Hi All,

I'm trying to which specific settings is actually blocking saving a users credentials from being saved in their RDP connection. They have had a shortcut which they have used for a while on Windows 10. She double clicks the icon and it connects her. After upgrading to 11 I'm getting bickered at with the defender credential guard block. I referenced this article "Windows 11 - Disable Windows Credential Guard - Microsoft Q&A" on a machine which RDP creds are saving and for instance "EnableVirtualizationBasedSecurity is set to "1". I do see Secure boot in the BIOS and it's set to Enabled.

This just came up after upgrading and no other users are having this issue. So I'm not sure which specific setting actually blocks the RDP connection from saving? Or possibly I'm looking at the wrong settings.

Thanks again,

You can save credentials but Credential Guard will prevent the transmission of them to a remote system.

I'm trying to figure out what changed from Windows 10, what setting was changed in Windows11?

neemobeer said:

You can save credentials but Credential Guard will prevent the transmission of them to a remote system.

Click to expand...

According to this only certain versions of Windows have credential guard. All of my systems are Pro and have virtualization based security running, but my credentials are accepted with RDP. Credential Guard overview

Stored credentials are not transmitted. You can manually enter creds for RDP

neemobeer said:

Stored credentials are not transmitted.

Click to expand...

I don't know why mine are accepted then. I never have to enter them. That be true, I'm not looking a gift horse in the mouth.

Hi All,
I did some testing and once I enabled Secure Boot in the BIOS with the GPO settings in place it blocked my saved credentials. As soon as I removed the GPO I was able to revert the reg key changes and I was able to save credentials again. So it looks like the GPO will change the keys needed and it seems to be a hit a miss on what machines will get the change.

Not sure if anyone has tried this recently, however now with the GPO in place and secure boot enabled, it's still taking my saved creds in RDP. Bummer....