Internal error when using PAM RDP Proxy service with AD account

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When launching an RDP Proxy service to connect to a Windows host with an Active Directory (AD) target account configured for auto-login, the MSTSC client fails with message "Internal Error".

Environment

CA Privileged Access Manager (PAM) configured with access policies to RDP servers using RDP Proxy services.

Cause

When PAM connects to an RDP server using an AD target account, it uses the Domain Name field from the target application to generate the domain part of the username for authentication. If this field has a bad domain name, then the internal error will occur in MSTSC.

Resolution

Update the target application and correct the Domain Name field to resolve the issue.