After adding a domain user to a computer over a VPN, I encountered this error. When I logged in as them and tried to connect the VPN, I received the error message “The computer must be trusted for delegation and the current user account must be configured to allow delegation”. I assume this was because they hadn’t authenticated to the domain with their account on this computer yet.
**Be careful when using Registry Editor as you can corrupt your system.
- Press start and enter regedit.exe, press enter to open Registry Editor.
- Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb
- Right click and select new -> DWORD (32-bit) Value
- Name the DWORD “ProtectionPolicy”
- Right click and select Modify…
- Enter 1 as the value data and press OK to save.
- Try again now and check if it is working. This may not work for every situation but did work for me.
This helped. Thanks for sharing.
Jarrod, you are a g. This worked perfectly after troublehshooting pointlessly on the DC. Thank you very much.
Thanks James, Glad I could help.
Wow. Fantastic. I was adding domain users via VPN. Getting the cursed TPM error when logging into M365 apps. Could not for the life of me figure it out. Finally hit the local credentials manager that triggered this very error. Much to my surprise this fixed the credentials manager error and the M365 TPM error! Coffee incoming!
Thanks sjakurt! I really appreciate it and glad i could help 🙂