Turn of NLA:
https://fixingitpro.com/2011/07/06/disabling-rdp-network-level-authentication-nla-remotely-via-the-registry/
Give network service account read permissions to the Keys folder.
Make sure Remote Desktop Services(TermService) service is running under network service.