ADMX Viewer
Microsoft.Policies.TerminalServer• User

Set RD Gateway authentication method

Specifies the authentication method that clients must use when attempting to connect to an RD Session Host server through an RD Gateway server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the "Use these RD Gateway server settings" option on the client. To allow users to overwrite this policy setting, select the "Allow users to change this setting" check box. When you do this, users can specify an alternate authentication method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify an alternate authentication method, the authentication method that you specify in this policy setting is used by default. If you disable or do not configure this policy setting, the authentication method that is specified by the user is used, if one is specified. If an authentication method is not specified, the Negotiate protocol that is enabled on the client or a smart card can be used for authentication.

Policy Details

Policy Name
TS_GATEWAY_POLICY_AUTH_METHOD
Registry Key
SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
Supported On
At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2
OMA-URI (CSP)
ADMX_TerminalServer/TS_GATEWAY_POLICY_AUTH_METHOD
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Set RD Gateway authentication method

Type: enum

Allowed Values
  • 5 Ask for credentials, use Negotiate protocol
  • 2 Ask for credentials, use NTLM protocol
  • 1 Ask for credentials, use Basic protocol
  • 4 Use locally logged-on credentials
  • 3 Use smart-card

Allow users to change this setting

Type: boolean

True:1
False:Not set