NLA (Network Level Authentication) is useful when RDP is directly connected to the internet. If however, you're using VPN and firewall to prevent access to the port, and trying to connect from Linux, then it just kills the ability to connect. Here's how to turn it off using PowerShell when the UI prevents you from access it.