When RDP is set to use Network Level Authentication on Windows 2008 R2, PUPM fails to login when we use RDP_AD/RDP

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

Description:

When RDP security level is set to Network Level Authentication, PUPM would fail to login when we use PUPM with Login Application RDP_AD or RDP

The following screen shot show that RDP is set to use "Network Level Authentication"

<Please see attached file for image>

Solution:

On the ENTM server

Step to followed for RDP

Go to the following path

X:\jboss-4.2.3.GA\server\default\deploy\IdentityMinder.ear\config\sso_scripts 

Use any text editor to edit the RDP.vbs Script

Add the following line

pupmObj.SetRDPOption "EnableCredSspSupport","i","1" 

Example of RDP.vbs

Set pupmObj = CreateObject("ACLauncher.ACWebLauncher")     
pupmObj.SetRDPOption "EnableCredSspSupport","i","1" 
hwnd = pupmObj.LauncheRDP("#host#", "#userDomain#\#userName#", "#password#") 

Step to followed for RDP_AD

Go to the following path

X:\jboss-4.2.3.GA\server\default\deploy\IdentityMinder.ear\config\sso_scripts 

Use any text editor to edit the RDP_AD.vbs Script

Add the following line

pupmObj.SetRDPOption "EnableCredSspSupport","i","1" 

Example of RDP_AD.vbs

Set pupmObj = CreateObject("ACLauncher.ACWebLauncher")     
pupmObj.SetRDPOption "EnableCredSSPSupport","i","1" 
hwnd = pupmObj.LauncheRDP(dcHostName, userName, password) 

Note to enable full windows mode for RDP/RDP_AD

pupmObj.SetRDPOption "screen mode id","i","2"

Environment

Release:
Component: SEOSWG