Mac Users Receiving "Please Wait" screen while using DUO with Microsoft RDP

%3CLINGO-SUB%20id%3D%22lingo-sub-2268534%22%20slang%3D%22en-US%22%3EMac%20Users%20Receiving%20%22Please%20Wait%22%20screen%20while%20using%20DUO%20with%20Microsoft%20RDP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2268534%22%20slang%3D%22en-US%22%3E%3CP%3EIf%20this%20is%20the%20wrong%20place%20to%20put%20this%2C%20I'm%20sorry%2C%20but%20I%20was%20told%20by%20Microsoft%20support%20to%20submit%20my%20question%20on%20here%2C%20as%20there%20may%20be%20experts%20that%20can%20better%20assist%20me.%20If%20there's%20a%20more%20suitable%20place%20on%20techcommunity%20for%20questions%20like%20these%2C%20please%20let%20me%20know!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%E2%80%99re%20running%20into%20an%20issue%20with%20our%20Macintosh%20users%20who%20are%20remoting%20into%20Windows%2010%20systems%20with%20DUO%20security%20installed%20for%20secondary%20authentication.%20They%20are%20encountering%20a%20blue%20%E2%80%9CPlease%20Wait%E2%80%9D%20screen%20that%20appears%20either%20after%20logging%20in%20after%20previously%20being%20in%20a%20session%2C%20or%20walking%20away%20and%20letting%20the%20computer%20idle%20for%20at%20least%205%20minutes.%20The%20blue%20screen%20shows%20up%20on%20the%20remote%20system%20side%2C%20aka%20on%20the%20Windows%2010%20system%2C%20and%20only%20appears%20when%20a%20secondary%20authentication%20is%20installed.%20Macintosh%20users%20are%20using%20the%20latest%20version%20of%20Microsoft%20Remote%20Desktop%20on%20the%20Mac%20App%20Store.%20Windows%20users%20do%20not%20encounter%20this%20issue%20at%20all.%3C%2FP%3E%3CP%3EI%20contacted%20DUO%20about%20this%20issue%20and%20they%20said%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3E%22The%20Duo%20RDP%20client%20makes%20use%20of%20windows%20credential%20providers%20in%20the%20MS%20protected%20GINA%20environment%20to%20apply%20Duo%202FA.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EThe%20Duo%20RDP%20client%20is%20called%20by%20the%20Windows%20Logon%20process.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EPrimary%20authentication%20is%20a%20windows%20process%20that%20Duo%20does%20not%20interfere%20in%2C%20once%20primary%20auth%20has%20succeeded%20the%20Duo%20RDP%20client%20will%20add%20the%20additional%20requirement%20of%20completing%202FA.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EThe%20Please%20Wait%20screen%20is%20not%20a%20Duo%20screen%20and%20unrelated%20to%20Duo%20Authentication.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EThe%20Duo%20integration%20uses%20Microsoft%20credential%20providers%20to%20require%202FA%20after%20primary%20authentication%20has%20succeeded.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EThese%20are%20Microsoft%20credential%20providers%20and%20speak%20to%20the%20windows%20logon%20process%20to%20either%20approve%20or%20deny%20authentication.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EThe%20windows%20OS%20still%20builds%20the%20session.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThey%20also%20said%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3E%22This%20is%20the%20job%20of%20the%20OS.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22str%22%3EYou%20will%20need%20to%20work%20with%20Microsoft%20Support%20as%20to%20why%20the%20session%20is%20failing%20to%20load%20if%20it%20was%20not%20ended%20properly.%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20I'm%20here%20to%20find%20out%20if%20anyone%20knows%20anything%20about%20this%20problem.%20Thank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Visitor

If this is the wrong place to put this, I'm sorry, but I was told by Microsoft support to submit my question on here, as there may be experts that can better assist me. If there's a more suitable place on techcommunity for questions like these, please let me know!

 

 

We’re running into an issue with our Macintosh users who are remoting into Windows 10 systems with DUO security installed for secondary authentication. They are encountering a blue “Please Wait” screen that appears either after logging in after previously being in a session, or walking away and letting the computer idle for at least 5 minutes. The blue screen shows up on the remote system side, aka on the Windows 10 system, and only appears when a secondary authentication is installed. Macintosh users are using the latest version of Microsoft Remote Desktop on the Mac App Store. Windows users do not encounter this issue at all.

I contacted DUO about this issue and they said:

 

"The Duo RDP client makes use of windows credential providers in the MS protected GINA environment to apply Duo 2FA.

The Duo RDP client is called by the Windows Logon process.

Primary authentication is a windows process that Duo does not interfere in, once primary auth has succeeded the Duo RDP client will add the additional requirement of completing 2FA.

The Please Wait screen is not a Duo screen and unrelated to Duo Authentication.

The Duo integration uses Microsoft credential providers to require 2FA after primary authentication has succeeded.

These are Microsoft credential providers and speak to the windows logon process to either approve or deny authentication.

The windows OS still builds the session."

 

They also said

 

"This is the job of the OS.

You will need to work with Microsoft Support as to why the session is failing to load if it was not ended properly."

 

So I'm here to find out if anyone knows anything about this problem. Thank you!

1 Reply
Would you mind take an screenshot of the Please Wait message and post it here?
Have you installed the latest update for Microsoft RDP?