NLA User issue

R

RobinM21

Junior Member
I configured SAML/SSO/EntraID and also an enrollment agent as described in the Parallels documentation. Now when I try to start a desktop I receive a message addressed to other user saying that I don't have the right to logon remotely. When I click OK the login screen appears which is filled out with the username of the NLA user. Of course this user is denied that right, but when I replace it with the credentials of the actual user it logs on. Again, everything (enrollment agent, enrollment agent user, NLA user, certificate templates, GPO etc.) is configured appropriately. Thanks in advance!

Kind regards,

Robin
 
This is the output from CertLogonCredProv.log during initial login:

[I 00/00000123/T15B0/P05D4/S0003] 15-10-25 13:27:52 - Module version 20.2.2 (build 26015) - LogonUI.exe 64bit
[I 00/00000123/T15B0/P05D4/S0003] 15-10-25 13:27:52 - Starting RAS Module - PRLSCREDPROV
[I 00/00000113/T15B0/P05D4/S0003] 15-10-25 13:27:52 - System OS - Windows 11 Enterprise Edition 10.0.22631 (x64) - Hv:VMware
[I 00/00000113/T15B0/P05D4/S0003] 15-10-25 13:27:52 - System language - English (USA)
[I 00/00000123/T15B0/P05D4/S0003] 15-10-25 13:27:52 - System Boot Time - Wed Oct 15 11:29:36 2025
[I 00/00000113/T15B0/P05D4/S0003] 15-10-25 13:27:52 - System timezone - W. Europe Daylight Time
[I 00/00000113/T15B0/P05D4/S0003] 15-10-25 13:27:52 - Machine Name - HP-70ONE-001
[I 0B/00000001/T15B0/P05D4/S0003] 15-10-25 13:27:52 - IP - *.*.*.* (Mac *-*-*-*-*-*)
[E 70/00000007/T15B0/P05D4/S0003] 15-10-25 13:27:52 - Failed to store token
[E 70/0000000B/T15B0/P05D4/S0003] 15-10-25 13:27:52 - ReceiveCredentials() failed
 
Ok. Do you have the mentioned updates installed? For me the registry solution worked. What also worked was disabling secure boot on my VMware VM. Did you also try the opt-out tool?
 
Hello,
I'm experiencing the same problem with the latest version v21.
Secure Boot hasn't fixed the issue, and implementing PPL isn't an option due to a security risk.
Is anyone else facing this situation?
 
Hello,
I'm experiencing the same problem with the latest version v21.
Secure Boot hasn't fixed the issue, and implementing PPL isn't an option due to a security risk.
Is anyone else facing this situation?
 
Last edited by a moderator:
Hi Florian and thank you for you reply,
This solution already testes and not working for me.
in the RDSH VM, i have this error in scardhooker.log: Failed to open process 768 (Access is denied. [0x00000005])
also in the same RDSHH, In CertLogonCredProv.log:
[I 00/00000123/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - Module version 21.0.0 (build 26247) - LogonUI.exe 64bit
[I 00/00000123/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - Starting RAS Module - PRLSCREDPROV
[I 00/00000113/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - System OS - Windows Server 2022 Standard Edition 10.0.20348 (x64) - Hv:VMware
[I 00/00000113/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - System language - English (USA)
[I 00/00000123/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - System Boot Time - Mon Nov 24 11:10:17 2025
[I 00/00000113/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - System timezone - Romance Standard Time
[I 00/00000113/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - Machine Name - VMNAME
[I 0B/00000001/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - IP - 192.168.44.92 (Mac 00-50-**-**-**-84)
[I 00/00000179/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - Xml parse error: Extra content at the end of the document
[E 70/00000007/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - Failed to store token
[E 70/0000000B/T0B2C/P01C4/S0002] 24-11-25 11:15:42 - ReceiveCredentials() failed

from the RDSH certutil -v -template TEMPLATENAME works fine without any issue.

Anyone have the same issue ? we use the latest version of Parallels RAS
 
You must log in or register to reply here.
Back
Top