When attempting to RDP with to some Windows servers using an Active Directory target account through PAM, MSTSC comes back with "Internal Error".
Privileged Access Manager, all versions
When PAM connects to RDP using an Active Directory target account, it uses the Domain Name field from the target application to generate the domain part of the username for authentication. If this field has a bad domain name, then the internal error will occur in MSTSC.
Update the target application and correct the Domain Name field to resolve the issue.