使用MSTSC远程登录时提示证书无效的解决方法

1. On your local machine Open Windows command prompt type: gpedit.msc -> Press Enter -> a new window will popout
2. Go to Local Computer Policy –> Computer Configuration –> Administrative Templates –> System –> Credentials Delegation
3. Double Click on “Allow Delegating Saved Credentials with NTLM-only Server Authentication”
4. By default it will be “not configured”
5. You will see radio buttons -> Enable the policy
6. Click the “Show” button in the options window below and enter the value “TERMSRV/*” (without quotes) into the list.
7. Click Apply button

8. Do the same thing for the following policies: 
   Allow Delegating Saved Credentials 
   Allow Delegating Default Credentials with NTLM-only Server Authentication 
   Allow Delegating Default Credentials

9. Make sure that "Deny Delegating Saved Credentials" is not enabled or does not contain “TERMSRV/*” in the list

10. Close all windows

11. Open a command prompt and use “gpupdate /force” command to apply the policy directly.