I'm trying to disable NTLM (for security reason) on a new domain.
I'm activating the
Network security: Restrict NTLM: Incoming NTLM traffic,
Network security: Restrict NTLM: NTLM authentication in this domain and
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers, to deny all incomming or ougoing NTLM from/to clients/servers.
But then, when try to connect via RDP, I'm getting this error message :
I've check the providede link and both my win 10 client and my windows servers 2019 are completly updated and their tspkg.dll are in an upper version than the one with the patch for the credssp/oracle remediation CVE.
I've even tried it on a brand new lab domain in a local VM : same thing.
I've also tried to downgrade the auth to "vulnerable" via gpedit, to no avail.
Am I missing a setting somewhere ?