These underlying codes are your real clue.
If the account doesn't have the explicit right to log on remotely, Windows may throw a 3079 or a generic "Access Denied" error. These underlying codes are your real clue
If the user is a member of the "Protected Users" group in Active Directory, certain delegation and authentication types (like NTLM) are restricted, which can cause connection failures in management tools. How to Fix Error 3079 1. Check Active Directory Account Restrictions These underlying codes are your real clue
Open mstsc.exe (the built-in Windows RDP client) and attempt to connect to the same server using the same credentials. These underlying codes are your real clue