setting nla from outside is irrelevant, rdp negotiates, internally we will try nla if we have both username and password