Issue enrolling non-domain Windows machines with Teleport Windows Desktop Service

[vbruge]

Hello,

I'm trying to enroll non-domain Windows machines into my Teleport bastion, following the official documentation:
https://goteleport.com/docs/enroll-resources/desktop-access/getting-started/

Context:
Teleport is deployed via Docker Compose
I successfully downloaded and ran teleport-windows-auth-setup on the Windows machine
I generated an enrollment token and mounted it into the container using Docker volume
My teleport.yaml configuration includes:

`windows_desktop_service:
enabled: "yes"
static_hosts:

• name: P-VW-RP00010-VB
  ad: false
  addr: 10.80.46.2
  resources:
• labels:
  "": ""
  `

Problem:
When starting the service, I get the following error in the container logs:
The mapping between account names and security IDs was not done

Questions:
Is enrolling non-domain machines fully supported in this setup?
Are there specific permissions or prerequisites required on the Windows side?

Thanks in advance for your help!

[webvictim]

What OS is running on the Windows machine you're trying to connect to?

[vbruge]

Hi,

My Windows machine is a Windows Server 2019 Standard

Furthermore, the version of my Teleport is 17.4.8 while the executable is version 17.4.5,

Perhaps I should install the more recent version of the executable?

[stevenGravy]

Yes and per the recent security announcement please make sure to use the latest 17.5.3+ version. https://goteleport.com/docs/changelog/

[vbruge]

Hello,

It's OK, it was a problem on our side

Thank you for your messages