[Solved] RDP Authentication Error Function Requested Is Not Supported

23

After the May 2018 update to Windows 10, most of the users who use Remote Desktop function are facing RDP authentication error, function requested is not supported issue where they get the following error while logging in to a remote computer via RDP.

An authentication error has occurred.
The function requested is not supported

Remove computer: [computername] This could be due to CredSSP encryption oracle remediation.
For more information, see https://go.microsoft.com/fwlink/?linkid=866660

RDP Authentication Error Function Requested Is Not Supported

RDP Authentication Error Function Requested Is Not Supported

This is due to a recent vulnerability fixed in Windows 10 and Windows 7. After installing the latest update KB4103727 for Windows 10 Version 1709 and KB4103718 for Windows 7, you will start getting this error.

4 solutions to RDP Authentication Error Function Requested Is Not Supported

Let’s go through some resolutions to this problem.

Solution 1: Install updates on the target computer

The first and the most recommended solution to this issue is to update the target computer on which you are trying to connect remotely. Go to Windows Update and check for updates. Install all the updates specifically related to CVE-2018-0886.

Specifically, if the target computer is running Windows Server 2016, you should install KB4103723 and if you are using Windows Server 2012 R2, then you should install KB4103725.

A server reboot will be required after installing these updates.

If you do not want to update the computer or it’s not in your access then you can try the other solutions listed below.

Solution 2: Using Group Policy

  1. Go to Run –> gpedit.msc to open Group Policy Editor.
  2. Go to the following policy path:
    Computer Configuration -> Administrative Templates -> System -> Credentials Delegation

    Credentials Delegation group policy

    Credentials Delegation group policy

  3. From the right-hand pane, open Encryption Oracle Remediation.
  4. Select Enabled and set the protection level to Vulnerable.
    Encryption Oracle Remediation policy

    Encryption Oracle Remediation policy

  5. Go to command prompt and run the following command:
    gpupdate /force

This will apply the group policy immediately and you will be able to use Remote Desktop without restarting the computer.

Solution 3: Using Registry Editor

The same thing can be achieved through Windows Registry. Here are the steps:

  1. Go to Run –> regedit to open Registry Editor.
  2. Go to the following key:
    HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters
  3. In the right-hand pane, edit the DWORD value of AllowEncryptionOracle key to 2.
  4. If you can’t find the key, you will need to create it. Otherwise, you can download the following registry file, double-click to run it and it will automatically create the key and set it for you.

      CredSSP Parameters Registry (364 bytes, 2,952 hits)

Solution 4: Uninstall updates from your computer

Another workaround is to uninstall the updates from your computer. If you are using Windows 10 Version 1709, you should uninstall the update KB4103727 and KB4103718 if you’re running Windows 7. Uninstalling these updates requires the computer to be restarted.

Final words

Although you can use any of the above mentioned methods to resolve this issue of RDP Authentication Error Function Requested Is Not Supported but I recommend that you should either use Solution 1 or Solution 2 for the resolution. What are your thoughts about this?

Must Read Articles:

23 Comments

  1. Option 2 worked great. As I don’t have access to the server and this comes up every time a new server is built, Option 1 was out of the question. Only concern is if there are any security risks in leaving this GP setting in place – a bit concerning, when you set something to “Vulnerable”.

  2. Well, in option 3, I don’t find From the right-hand pane, open Encryption Oracle Remediation.
    & in option 4, Also doesn’t exist the entry as HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters

    it exist until HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System

    but missing “CredSSP\Parameters”

    I am using Win2012r2

  3. I solved it on a Win7 x64 WS installing the update from 05/05/2018, not the monthly rollup. Thank you for sharing this solution with the community.

Leave A Reply