CredSSP encryption oracle remediation fix Windows 10

CredSSP encryption oracle remediation fix Windows 10

The most common scenario is that the client has the CredSSP update installed, and the Encryption Oracle Remediation policy setting does not allow an insecure RDP connection to a server that does not have the CredSSP update installed.

To work around this issue, follow these steps:

1. On the client has the CredSSP update installed, run gpedit.msc, and then browse to Computer Configuration > Administrative Templates > System > Credentials Delegation in the navigation pane. 
2. Change the Encryption Oracle Remediation policy to Enabled, and then change Protection Level to Vulnerable.

Goto Run type gpedit.msc

Expand Administrative Templates

Expand System

Expand Credentials Delegation Edit Encryption Oracle Remediation

Select Enabled and change Production Level to Vulnerable

If you cannot use gpedit.msc, you can make the same change by using the registry, as follows:

1. Open a Command Prompt window as Administrator.
2. Run the following command to add a registry value:
   REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters\ /v AllowEncryptionOracle /t REG_DWORD /d 2
3. Restart your computer.