Fix credssp error during Remote Desktop or RDP in Windows 10

Some users abruptly confront CredSSP error after installing the latest patches of Windows 10 which repeatedly obstructs the Remote desktop connections. Before starting the solution part let’s see what is CredSSP. “Credential Security Support Provider Protocol” (in short CredSSP) is a security provider that helps to pass on user credentials securely from a client computer to a Windows server using the Transport Layer Security (viz TLS) as an encrypted pipe. Applications depending on CredSSP for their authentication might also be under the threat of this error. If you have installed an update on a vulnerable workstation and then made an attempt to connect to an unpatched server, the below-mentioned error message will float up after typing the password for connecting an RDP session – “An authentication error has occurred. The function requested is not supported. Remote computer: This could be due to CredSSP encryption oracle remediation”.

In the past, Microsoft gives users the ability to connect computers to Remote Desktop connection without updating them. However, with releasing the latest patches, Microsoft has maximized the security and you can no more connect to an RDP server without updating. CredSSP is in fact an authentication provider that helps in processing the authentication requests for various programs. The latest update has caused many people to suffer from CredSSP error nevertheless releasing a few security patches for resolving the same. However, we can fix the issue using some conventional workarounds to be discussed in this write up today. Let us begin with methods list –

CredSSP Error

Here is How to Fix CredSSP error during Remote Desktop or RDP in Windows 10 –

1] Change Group Policy Settings

With the latest update, Microsoft restricts the users from getting a connection to a computer that has not been updated yet in order to maintain security control. In the end, you may experience the CredSSP error during Remote Desktop or RDP in Windows 10. You can fix the issue either by updating to the latest patches to the other computer or downgrade the protection level to Vulnerable using Group Policy Editor. Here are the steps to follow for changing the group policy in the local computer –

1. Invoke the Run dialog pressing Windows key and R.
2. Type gpedit.msc in the text space.
3. Press Enter key and let Group Policy Editor window open.
4. In the left pane, navigate to the following path –

Computer Configuration => Administrative Templates => System => Credentials Delegation

1. Once reached to Credentials Delegation, jump to the corresponding right side.
2. Locate “Encryption Oracle Remediation” and make a double click on it to edit. This option should set to Not Configured by default.

1. Select the radio button set to Enabled.
2. Move ahead to the Options area and click the drop-down menu beside “Protection Level“.
3. Choose Vulnerable from the context.

1. Click Apply button first followed by hitting OK to save the settings.
2. Finally, Restart the computer to make the changes effective so that, CredSSP error doesn’t come up again.

2] Modify Windows Registry to fix CredSSP error

If you are using the Home Edition of Windows 10, Group Policy Editor will not be available since it doesn’t come by default. However, you can follow the ways to achieve the same – How to Activate Local Group Policy Editor / Gpedit.msc in Windows 10 Home. So in such situations, you can easily change the DWORD in Registry for the downgrading Protection Level. Here is how to perform this task –

1. Press Win+Q hotkeys at once to call Taskbar Search.
2. Type regedit in the empty text area and press Enter key. Click Yes when the UAC prompts for permission.
3. When you access Registry Editor, navigate to below path in the left pane –

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

1. Once reached System, right-click on it and choose Key. Name the new key as CredSSP.
2. Create another key under CredSSP using the above way and name it as Parameters.
3. Click Parameters and shift to adjacent right side pane.
4. Here, right-click on any empty space and select New => DWORD (32-bit) Value.
5. Name the new DWORD as AllowEncryptionOracle.
6. Double click AllowEncryptionOracle DWORD and insert the value data 2.
7. Leave the Registry Editor window and reboot Windows 10 for making the changes effective.

3] Tweak the Remote Desktop Settings

Readjusting Remote Desktop Settings can sometimes resolve CredSSP error in Windows 10 effectively. For that, follow the below instructions –

1. Load the Desktop area pressing Win+D hotkey together.
2. Right-click This PC icon and select Properties.
3. When the System window arrives in the display, click Advanced system settings link from the left pane.
4. In few seconds, System Properties wizard will float up, jump into its Remote tab.
5. Here clear off the checkmark from the box set for “Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended)“.

1. Press the Apply button and then OK for saving the changes.
2. Finally, reboot the computer for the modifications to take place.

4] Remove the dreadful Update patches from the system

Credssp error during Remote Desktop or RDP in Windows 10 is associated with the KB4103727 patch. Therefore, you need to remove this to resolve the error easily. To uninstall an update patch, follow the below guidelines –

1. Invoke Run dialog, type appwiz.cpl, and hit Enter.
2. This will open Programs and Features window.
3. Click View installed updates from the left pane.
4. After a new page unveils, move out for the desired patch.
5. Right-click the same and select Uninstall option.
6. Click Yes for confirmation from the popup.

5] Perform System Restore and load the previous working state

As already mentioned above, Credssp error during Remote Desktop or RDP in Windows 10 occurs after installing the latest patches for the Operating System. There is an easy escape from this issue and that is to perform System Restore. The process allows Windows to load back the previous state where the OS was not experiencing the error. This is not actually a recommended resolution but can be the best alternative in case you fail to resolve it by any other means. Here are the steps to follow –

1. Click on the taskbar search icon and insert the command rstrui in it.
2. Press Enter key to access System Restore wizard.
3. Click Next button from the bottom to pass forward.
4. Choose the latest Restore Point from here. If you want to discover more, check the box that reads Show more points and select one where you opt to return back.
5. On the next window, click Finish to start the process.
6. Click Yes when a pop up floats up asking for your confirmation.

Methods:
1] Change Group Policy Settings
2] Modify Windows Registry Editor
3] Tweak the Remote Desktop Settings
4] Remove the dreadful Update patches from the system
5] Perform System Restore and load the previous working state

That’s all!!