person-setup-machine

Remote Desktop error 0x1908

Remote Desktop error 0x1908


Category: Resource – Desktops

The Remote Desktop error 0x1908 (often displayed as extended error 0x0) means your RDP client is configured to require smart card or Windows Hello for Business authentication, but the remote computer or your current session setup cannot support or access those devices. See https://learn.microsoft.com/en-ie/answers/questions/2129230/rdp-fails-on-win11-24h2-the-selected-user-credenti

You can bypass or fix this issue using the following steps:

Method 1: Disable Smart Card Redirection (Recommended)

This is the most common fix when connecting from a personal device. [1]

  1. Open the Remote Desktop Connection (mstsc) app.
  2. Click Show Options at the bottom to expand the menu.
  3. Navigate to the Local Resources tab.
  4. Under Local devices and resources, click the More… button.
  5. Uncheck the box for Smart cards or Windows Hello for Business.
  6. Click OK, go back to the General tab, and click Save. [1, 2, 3]

Method 2: Check RDP Client Group Policy

If you are managing the connection through Group Policy, you may need to explicitly disable required smart card policies. [1]

  1. Press Win + R, type gpedit.msc, and press Enter.
  2. Go to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security.
  3. Locate Require use of specific security layer for remote (RDP) connections and set it to Enabled, choosing RDP or Negotiate as the security layer (instead of forcing SSL/TLS which sometimes triggers authentication conflicts).
  4. Open the command prompt as administrator and run gpupdate /force to apply the policy. [1, 2, 3]

Method 3: Disable Network Level Authentication (NLA)

Sometimes the remote session manager gets stuck caching these credentials, and turning off NLA allows a legacy password login. [1]

  1. On the remote computer, press Win + R, type sysdm.cpl, and hit Enter.
  2. Go to the Remote tab.
  3. Uncheck Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure).
  4. Try to connect from your client machine. Once connected and authenticated, you can turn this setting back on. [1, 2, 3, 4]

If you’d like, I can:

  • Help you troubleshoot further by checking the Event Viewer on the host machine.
  • Guide you through enabling Windows Hello across your domain using official Microsoft documentation. [1, 2]