Firstly, for CCC users, it is recommended that they download the latest connection file for the RDP connection from SAP.  Any existing connection file found should be considered as out of date.


If there are still issues when logging in then check for the following settings within Group Policies and then the RDP file.  Following this, If their IT Support require any further direction it would be recommend that they then contact Microsoft to get further support.


Group Policies

Within their domains Group Policy editor their IT support may need to look for something along the following path.


Group policy

   Computer Configuration

       Administrative Templates

           Windows Components

               Remote Desktop Services

                   Remote Desktop Connection Client


Review each of the settings and disable those that are not desired.  Remembering that when connecting through an RDP connection, you may not be able to create PINs etc and therefore having these security features enabled may not be appropriate.  This security is also from the connecting device (client) end, NOT the connected machine end.


After the group policies have been updated, it may be necessary for the user to log off and then log back onto the domain to refresh the group policy assignments for their computer.


RDP Files settting

Please see below the following link from Microsoft.

Remote Desktop Connection for credentials - Windows Server | Microsoft Learn 


It identifies a possible additional setting that can be added to the RDP connection file that can disable the need for the additional credential which is inapproprate for the SBOCloud environment.


Unfortunately, QBT have been advised by Microsoft that they should not alter this setting and that the corrections must be made by the IT support of the user.


Locate the line that resembles as: authentication level: i: n

Change the authentication level to 0 so that the line becomes:

authentication level:i:0