A Windows 7 client added to ActiveDirectory (Active Directory-AD, note: WinSRV2008) can use saved creden。 for automatic verification when logging on to a computer in the Active Directory Using Remote Desktop. However, even if the computer outside the Active Directory saves the logon creden, the system still prompts you to enter the password during connection, as shown in:
Remote Desktop prompts "the system administrator is not allowed to log on to the Remote computer with the saved credendesktop because the identity is not fully verified. Enter New creden ."! This is a security design. Of course, we can modify it so that the system added to the AD can save the creden。 of the AD external computer.
To do this, enter gpedit. msc at run to start the Local Group Policy Editor. Go to computer configuration-manage template-system-credential assignment. Open the "Allow to allocate saved creden for NTLM server authentication only" form on the right, as shown in:
Enable "allow allocation of saved creden for NTLM server authentication only", and click "Add Server to list: display ", add the name and type of the server that allows you to save creden。 in the server list, such as the terminal server on dc.contoso.com, that is, "TERMSRV/dc.contoso.com ". Of course, you can also enter TERMSRV/* to allow the remote terminal creden。 of all computers to be saved.
Finally, execute gpupdate/force to make the modified group policy take effect!