Enabling Network Level Authentication on Windows XP Service Pack 3 for access to Server 2008 via Remote Desktop

When connecting to a Windows 2008 Server using remote desktop from a Windows XP client running service pack 2 or earlier, you get the following error message:

The remote computer requires Network Level Authentication, which your computer does not support.

To enable NLA in XP machines; first install XP SP3, then edit the registry settings on the XP client machine to allow NLA

Configure Network Level Authentication

  1. Click Start, click Run, type regedit, and then press ENTER.
  2. In the navigation pane, locate and then click the following registry subkey: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
  3. In the details pane, right-click Security Packages, and then click Modify.
  4. In the Value data box, type tspkg. Leave any data that is specific to other SSPs, and then click OK.
  5. In the navigation pane, locate and then click the following registry subkey: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProviders
  6. In the details pane, right-click SecurityProviders, and then click Modify.
  7. In the Value data box, type credssp.dll. Leave any data that is specific to other SSPs, and then click OK.
  8. Exit Registry Editor.
  9. Restart the computer.

14 thoughts on “Enabling Network Level Authentication on Windows XP Service Pack 3 for access to Server 2008 via Remote Desktop

  1. You know it's people like you who make it easier for people like me. Many, many thanks for taking the time to relay your experience and the solution.

  2. Thank you! While the SecurityProvider value exists in Win8.1, I still needed to add the tspkg value in the SecurityPackages under LSA

  3. I have the same problem on W7 Pro. I have tried to edit the register but there is a error message "cannot edit SecurityProviders: Error writing the value's new contents" please help

Leave a Reply to Unknown Cancel reply

Your email address will not be published.