Establish a remote desktop connection and THEN ask for credentials

Sometimes it may be necessary that you establish a RDP connection first and then enter your credentials. This can come in handy when you have to change your password on the domain but you do not have access to a physical client. Or you have an additional MFA / credential provider setting in the login process and you want to show that in a demo.

1. On more recent Windows Versions you have to change a value in the registry
   
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

   Change “SecurityLayer” to 0

   ---

2. Furthermore it may be required that you disable NLA
   

   ---

3. The most important setting is: Create a RDP file and edit it with Notepad. Append the following line to the file
   
   enablecredsspsupport:i:0

   and save.

   ---

4. After that, the RDP connection should be established and you should see the Windows Sign-On Screen as you would on a physical PC.