Changing RDP Security Layer in Windows Server 2012 / 2016

shape
shape
shape
shape
shape
shape
shape
shape

In Windows Server 2012 and 2016, if the remote user’s password is expired, by default it will not be possible to connect via RDP and you will receive the following error message:

The user must change the password at the next logon

To solve this problem, simply change the Security Layer to RDP:

  1. Go to Run, and type“gpedit.msc“.
  2. Computer Configuration → Administrative Templates
  3. Windows Components → Remote Desktop Services
  4. Remote Desktop Session Host → Security
  5. Then click on the option: Request the use of a specific security layer for remote connections (RDP)
  6. When you access the option above, you will see the following screen in the image below. Simply change the security layer to RDP, as in the image below:

Now, even after the password expires, you can access the host via RDP and change the password at login.

Leave a Reply

Your email address will not be published. Required fields are marked *

Latest news

Latest news directly from our blog.