Stuck with RDP authentication error: Cannot contact the local security administrator?

Here at Bobcares, we assist our customers to fix this error as part of our Server Management Services.

Today let’s see how or Support Engineers fix this error with ease.

What causes “RDP authentication error: Cannot contact the local security administrator “?

Before moving into the solution for “RDP authentication error: Cannot contact the local security administrator” we can see the different causes for this error.

1. This error can be due to network congestion that prevents secure connections to the Remote Desktop Server.
2. An Error message appears if the Remote Desktop Server is configured for secure connections using TLS and TLS on a client (source computer) trying to connect using Remote Desktop Protocol (RDP).
3. DNS addresses may be wrongly configured.
4.  Remote Desktop connections may be disabled by default on either the host or the client PC.
5.  IP and DNS address conflicts.

Three types of secure connections used for RDP

Remote Desktop in Windows Server includes three types of secure connections, they are:

1.  Negotiate

 This security method uses TLS 1.0 for server authentication if TLS is supported.

If TLS is not supported, the server is not authenticated.

2. RDP security level

Uses Remote Desktop Protocol encryption to ensure secure communication between the client computer and the server.

If this option is selected, the server was not authenticated.

3. SSL (Secure Sockets Layer)

Requires TLS 1.0 for server authentication.

If TLS is not supported, we cannot connect to the server.

Methods to Fix “RDP authentication error: Cannot contact the local security administrator”

The following are some of the methods which our Support engineers use to fix this error easily.

1. Change the Remote Desktop Security level.

We can change the Remote Desktop Security level on Remote Desktop Server to the RDP security level to allow secure connection using Remote Desktop Protocol encryption.

Steps to follow are given below:

1. First take Administration Tools and then move to Remote Desktop Session Host Configuration.
2. Then in the RD Session Host Configuration view the Connections section.
3. After that Right-click the Microsoft RDP 6.1 RDP Listener and select Properties.
4. From Properties select the RDP security level as the security level.
5. Consequently click OK.

This setting does not require restarting the Server or Remote Desktop service.

2. Disabling or Restricting Authentication.

This can be done in two ways as given below:

a) When there is direct/local access to the machine we are trying to connect to.

1. First open the cmd and type sysdm.cpl {enter} > Remote.
2. Next remove the tick from “Allow connections only from computers running Remote Desktop with Network Level Authentication” and Allow remote connections to this computer.

3. Apply the changes.

b) When we do not have direct/local access to the machine we are trying to connect to.

1. First take Connect Network Registry and provide the details for the machine we are trying to connect to then click OK.
2. After change UserAuthentication value to 1 (one) and click OK

3. Disable RDP Network Level Authentication via Group Policy

The steps to follow are:

1. First take Group Policy Management then either create a new group policy object or edit an existing one.
2. Go to the Computer Configuration and take Security from Remote Desktop Session Host.
3. After that locate the ‘Require user authentication for remote connections by using Network Level Authentication’ policy.
4. Next disable the policy and then apply the changes
5. Finally, give OK.

4. Change the DNS Address

The steps our Support Techs follow are given below:

1. First open the command prompt and type ‘ncpa.cpl’  to open the Internet Connection Settings item in Control Panel.
3. After that take the Active Network adapter and go to properties.
4. Locate the Internet Protocol Version 4 (TCP/IPv4) item on the list. Click the Properties button below.
5. Set the Properties window to “Use the following DNS server addresses” if it was set to something else.
6. After that set the Preferred DNS server to be 8.8.8.8 and the Alternate DNS server to be 8.8.4.4.
7. And enable the “Validate settings upon exit” option and click OK in order to apply the changes.

5. Enable Remote Connections in Group Policy Editor

We can follow the steps below:

1. First open the command prompt and type“gpedit.msc” to open the Local Group Policy Editor tool.
2. Then take the Local Group Policy Editor and go to Remote Desktop Session Host.
3. After this we have to enable “Allow users to connect remotely by using Remote Desktop Services” in Connections.
4. Then apply the changes.
5. After that reboot the computer to save the changes.

6. Run a Helpful Command on the Host

This method is usually to fix any connectivity issues.

1. First Open a command prompt as administrator.
2. Then type in the following command:

ipconfig/flushdns

[Need any further assistance in fixing RDP errors? We can help you with it]

Conclusion

In short, we saw what are the causes for getting the “RDP authentication error: Cannot contact the local security administrator” error. Also, we saw various methods that our Support Engineers use to fix this with ease.