How to Enable NLA for Remote Desktop in Windows 11

Network Level Authentication (NLA) is a critical security feature that requires users to authenticate themselves to the network before establishing a Remote Desktop session, protecting the host machine from unauthorized access and denial-of-service attacks. This guide outlines how to enable NLA in Windows 11 using the Settings app, System Properties, Group Policy Editor, and PowerShell.

Method 1: Enable NLA via Windows Settings

  1. Press Windows Key + I to open the Settings app.
  2. Navigate to System on the left menu, then scroll down and click Remote Desktop.
  3. Toggle the Remote Desktop switch to On if it is not already enabled.
  4. Click the arrow next to the Remote Desktop toggle to expand the settings.
  5. Check the box next to Require devices to use Network Level Authentication to connect (recommended).

Method 2: Enable NLA via System Properties

  1. Press Windows Key + R to open the Run dialog box.
  2. Type sysdm.cpl and press Enter to open System Properties.
  3. Switch to the Remote tab.
  4. Under the Remote Desktop section, ensure Allow remote connections to this computer is selected.
  5. Check the box for Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended).
  6. Click Apply, then click OK.

Method 3: Enable NLA via Local Group Policy Editor

Note: Group Policy Editor is available in Windows 11 Pro, Enterprise, and Education editions.

  1. Press Windows Key + R, type gpedit.msc, and press Enter.
  2. Navigate to the following path in the left pane: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security
  3. In the right pane, double-click Require user authentication for remote connections by using Network Level Authentication.
  4. Select the Enabled option.
  5. Click Apply and then OK.

Method 4: Enable NLA via PowerShell

  1. Right-click the Start button and select Terminal (Admin) or PowerShell (Admin).
  2. Run the following command to enable NLA in the Windows Registry:
Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name "UserAuthentication" -Value 1
  1. To verify that NLA is enabled, run:
Get-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -Name "UserAuthentication"

If the output value is 1, Network Level Authentication is active.