Network Level Authentication

Advantages

• It requires fewer remote computer resources initially, by preventing the initiation of a full remote desktop connection until the user is authenticated, reducing the risk of denial-of-service attacks.
• It allows NT Single sign-on to extend to Remote Desktop Services.
• It can help mitigate Remote Desktop vulnerabilities than can only be exploited prior to authentication.

  Disadvantages

• No support for other credential providers
• To use Network Level Authentication in Remote Desktop Services, the client must be running Windows XP SP3 or later, and the host must be running Windows Vista or later or Windows Server 2008 or later.
• Support for RDP Servers requiring Network Level Authentication needs to be configured via registry keys for use on Windows XP SP3.
• Not possible to change password via CredSSP. This is a problem when "User must change password at next logon" is enabled or if an account's password expires.
• Requires "Access this computer from the network" privilege, which may be restricted for other reasons.
• The IP addresses of the clients trying to log in will not be stored in the security audit logs, making it harder to block brute force or dictionary attacks by means of a firewall.