Credentials Not Work

Last updated: 2020-12-29 17:44:36

    Issue

    The following error message appears when trying to log in to a Windows CVM remotely via RDP protocol, such as using MSTSC.
    The credentials that were used to connect to XXX.XXX.XXX.XXX did not work. Please enter new credentials.

    Solutions

    Note:

    This document uses a Tencent Cloud CVM with the Windows Server 2012 operating system as an example. The procedure may vary slightly according to the operating system version.
    Follow the instructions below and try to connect to your Windows CVM after each step. If the issue persists, proceed to the next step.

    Step 1: modify the network access policy

    1. Log in to the Windows instance using VNC.
    2. Once you log in, click to open the Windows PowerShell window.
    3. In the Windows PowerShell window, enter gpedit.msc and press Enter. The Local Group Policy Editor window appears.
    4. In the left sidebar, expand the following directories in order: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
    5. Locate and open Network access: Sharing and security model for local accounts under Security Options, as shown below:
    6. Select Classic - local users authenticate as themselves and click OK, as shown below:
    7. Check whether you can connect to your Windows CVM now.
      • If yes, the problem has been solved.
      • If no, proceed to “Step 2: modify credentials delegation”.

    Step 2: modify credentials delegation

    1. In the left sidebar of Local Group Policy Editor, expand the following directories in order: Computer Configuration > Administrative Templates > System > Credentials Delegation.
    2. Locate and open Allow delegating saved credentials with NTLM-only server authentication under Credentials Delegation, as shown below:
    3. In the pop-up window, select Enabled. Click Show… under Options, enter TERMSRV/* for Show Contents and click OK, as shown below:
    4. Click OK.
    5. On the desktop, click to open the Windows PowerShell window.
    6. In the Windows PowerShell window, enter gpupdate /force and press Enter to update the group policy, as shown below:
    7. Check whether you can connect to your Windows CVM now.
      • If yes, the problem has been solved.
      • If no, proceed to “Step 3: configure local credentials”.

    Step 3: configure local credentials

    1. On the desktop, click and navigate to Control Panel > Users Accounts > Credential Manager. Click Windows Credentials to display Windows credentials, as shown below:
    2. Check whether the credential you used to log in to your Windows CVM exists.
      • If no, proceed to the next step to add Windows credentials.
      • If yes, proceed to "Step 4: turn off password protected sharing".
    3. Click Add a Windows credential to go to the Add a Windows Credential window, as shown below:
    4. Enter the IP address, username, and password of the CVM instance and click OK.

      Note:

      • The IP address refers to the public IP address of your CVM instance. For more information, see Getting Public IP Addresses.
      • The default username for a Windows instance is Administrator and the password is set when you create the instance. If you’ve forgotten your password, you can reset the instance password.
    5. Check whether you can connect to your Windows CVM now.
      • If yes, the problem has been solved.
      • If no, proceed to “Step 4: turn off password protected sharing”.

    Step 4: turn off password protected sharing

    1. On the desktop, click and navigate to Control Panel > Network and Sharing Center > Advanced sharing settings, as shown below:
    2. Expand the All Networks tab, select Turn off password protected sharing under Password protected sharing, and click Save changes.
    3. Check whether you can connect to your Windows CVM now.
      • If yes, the problem has been solved.
      • If no, please submit a ticket for assistance.