We are talking about the VM portal and SSO and RDP, and it is still not working for users. admin@internal can get an RDP login screen and I can use domain credentials and login. Users, however, never get the RDP window, even though spice comes right up. I even created a test user and made them a SuperUser and still no RDP through the portal. When logged into the vm portal as a normal user I can see the vm's, whick I would like the user assigned to that specific vm to only see that machine and not all of them. Either way, I click on the console options button and chose RDP and nothing happens. if I chose spice, it comes right up. There is something some where missing in permissions. Also, 99% of the time, if I try to add a user from AD, the ui logged in as admin@internal can't find it. i can reboot the Engine host and they are in the Users list. not always, but usually. Almost like the ldap portion is shutting down or timing out. Whatever you need, let me know. I've look at logs and there are errors related but googling them hasn't helped. Just some background: The engine host is separate from the other hosts, it is logged into the domain using samba winbind following Red Hat's instructions, as are all my hosts and vm's. sssd and kerberos are working without a problem. I can do anything on the domain I want to do with the engine host, except use RDP SSO to login to a vm. I am very frustrated at this point and need some guidance. Any help would be appreciated.