Error Code: 126978

  • Published on Nov 19, 2025
  • 1 minute(s) read
  • AA
 Prev Next

Error

While launching an Entra-joined desktop, a user may encounter the following error message while attempting to connect:

Your Workspot desktop requires Network Level Authentication (NLA) along with Azure AD authentication. This combination is not supported by the Workspot Client. Contact your IT administrator to disable NLA on your desktop.

In the Watch, an Admin may see the following error in the details column of the trace events for the same issue:

This issue occurs when the desktop template or virtual machine (VM) is configured with Network Level Authentication (NLA) enabled while also joined to Azure Active Directory (AAD). The combination of NLA + Azure AD is not supported by the current Workspot Client.

  • detailedErrCode: "126978”

  • detailedErrType: "FreeRdp"


Root Cause

  • The VM or template is configured with Network Level Authentication (NLA) enabled.

  • When Azure AD authentication is used, NLA should be disabled, as the Workspot Client does not support both mechanisms together.

Resolution Steps

1. Disable NLA on the affected VM (via Azure Portal)

  • Sign in to the Azure Portal.

  • Navigate to Virtual Machines and select the affected VM.

  • In the left panel, go to Operations > Run command.

  • Choose the Disable NLA command.

  • Click Run.

  • Once the command completes, restart the VM.

  • Reconnect to the VM using the Workspot Client to confirm successful login.

2. Apply the Fix to the Template (Permanent Resolution)

Once NLA is confirmed to be the cause, apply the same fix at the template level to ensure all future desktops are provisioned correctly.

  • Clone the existing Template in Workspot Control.

  • Open the newly cloned template.

  • Use Azure Run Command or local access to disable NLA:

    • Navigate to System Properties > Remote.

    • Under Remote Desktop, uncheck “Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended).”

  • Save and reboot the template.

  • Move the Template to Preview mode and test connectivity by provisioning a Preview Pool.

  • Once verified, set the Template to Published.

  • Recreate the desktops in the affected pools using the updated template.

Verification

Users should be able to connect via the Workspot Client without receiving the NLA error.