Here is the setup. We have built out our own Thin Clients using Windows LTSC 2019, enabled Windows embedded and created a limited local user account who will autologin to a custom shell pointing to the vmware view client.
This functions as expected. There is a default connection server and the user is then prompted to login using their domain user and radius for MFA to get access to their Horizon pools.
Audit reports are showing though that the local user account that is auto logging in and running the client is having authentication failures on all the deployed thing clients. I narrowed it down to happening when the user enters their domain credentials in the radius screen, and after they do that we get four failed authentication attempts from that local user and that client machine on the domain controllers security logs.
If I disable radius authentication, this doesnt happen.
What is happening during radius authentication that is causing that local user to be authenticating 'something' on the domain. Has anyone experienced this ? Security is concerned about eliminating all the authentication failure noise, and rightly so!
VMWare support hasnt been much help.
