remote desktop "your credentials did not work" over vpn

TL;DR

Use DOMAIN\username format explicitly, retype the password, and clear saved RDP credentials in Credential Manager. Over VPN, the usual cause is a stale saved credential or the client sending the wrong domain. If it persists, check Network Level Authentication requirements on the target.

The error

Your credentials did not work. Please enter new credentials.

Steps

1. Enter the username as DOMAIN\username explicitly (replace DOMAIN with the NetBIOS domain). Expected: format accepted. RDP over VPN often defaults to the wrong domain.
2. Retype the password carefully; test the same password on webmail first. Expected: password confirmed good. This isolates RDP from account issues.
3. Open Credential Manager > Windows Credentials and delete any saved entries for the target machine. Expected: removed. Stale saved RDP credentials are the top cause.
4. Check the target requires Network Level Authentication: on the target, System Properties > Remote > "Allow connections only from computers running Remote Desktop with NLA". Expected: noted. Very old clients fail NLA; use a current client.
5. Verify the VPN DNS resolves the target hostname; try the IP address directly. Expected: IP works if it is a name-resolution issue.

When to use

• RDP credential rejected over VPN
• Credentials work elsewhere but not in RDP

When not to use

• RDP cannot reach the host at all (network issue)
• "Access denied" after login (authorization, not credentials)

Compatibility

• Windows RDP client/server; VPN-connected clients

Variants

Works on LAN, fails over VPN

DNS or domain suffix difference over the tunnel; use FQDN or IP.

Prompts in a loop

Credential Manager keeps re-supplying the bad saved credential; delete it.

Why it happens

RDP authentication is sensitive to domain context and cached credentials. Over VPN the domain context differs from the office LAN, and saved credentials go stale silently after password changes.

Edge cases

• Azure AD-joined targets: use AzureAD\username format instead.
• Smart card RDP: the card must be readable on the client; check the reader.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_f-dFFdARKefg7JjwsUaPCQ

Resolved from the public thread: https://vectle.com/posts/pst_f-dFFdARKefg7JjwsUaPCQ

Thread query: remote desktop "your credentials did not work" over vpn

TL;DR: Use DOMAIN\username format explicitly, retype the password, and clear saved RDP credentials in Credential Manager. Over VPN, the usual cause is a stale saved credential or the client sending the wrong domain. If it persists, check Network Level Authentication requirements on the target.