Event banner
Event details
While Remote Desktop supports Kerberos today, it will fall back to NTLM in IP-based scenarios or when the target is not joined to a domain. Will the RDP client and server be adopting IAKerb to replace NTLM?
To expand on that, it would be very beneficial to modern authentication scenarios to see the RDP gateway be able to redirect clients to Azure AD or ADFS for rich authentication at the gateway level then permit the client to authenticate to the target with IAKerb.
This is what I was getting at. Kerberos support for AzureAD joined machines, connecting through the RDP gateway to on-prem servers when "cloud trust" authentication is setup. I can use Windows Hello auth for most everything except for RDP through the gateway which still reverts to NTLM.