Azure windows 11 VM reset password error = Deploy failed with deploymentStatusCode (Failure)

Question

Azure windows 11 VM reset password error = Deploy failed with deploymentStatusCode (Failure)

James Sidwell 45

We have restored a backup of a working Windows 11 VM to another location and now can't RDP to the restored machine. Any attempt to RDP using a domain admin or local admin user results in this error:

User's image

I have reset the RDP config using the Azure portal and tried resetting the password for the local admin user but that gives this error: Deploy failed with deploymentStatusCode (Failure). Not particularly helpful...

The VM agent states it is ready and I have deleted and re-created the vm access extension.

Any ideas what else I can try to get into this VM?

kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2023-08-09T02:08:32.8766667+00:00

Hello, @James Sidwell !

Looking through the RDP troubleshooting guide, the first thing I would check is the network security group (ensuring access and that port 3389 is open):

Verify Network Security Group rules. Use IP flow verify to confirm if a rule in a Network Security Group is blocking traffic to or from a virtual machine. You can also review effective security group rules to ensure inbound "Allow" NSG rule exists and is prioritized for RDP port(default 3389). For more information, see Using Effective Security Rules to troubleshoot VM traffic flow.

The detailed troubleshooting guide will include steps for checking the public IP address of the VM.

If that doesn't resolve the issue let us know so we can look into other troubleshooting options.

Accepted answer

1 additional answer

Your answer

kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2023-08-09T02:08:32.8766667+00:00

Hello, @James Sidwell !

Looking through the RDP troubleshooting guide, the first thing I would check is the network security group (ensuring access and that port 3389 is open):

Verify Network Security Group rules. Use IP flow verify to confirm if a rule in a Network Security Group is blocking traffic to or from a virtual machine. You can also review effective security group rules to ensure inbound "Allow" NSG rule exists and is prioritized for RDP port(default 3389). For more information, see Using Effective Security Rules to troubleshoot VM traffic flow.

The detailed troubleshooting guide will include steps for checking the public IP address of the VM.

If that doesn't resolve the issue let us know so we can look into other troubleshooting options.

Answer 1

Hello, @James Sidwell !

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue:

Restored Windows 11 VM fails to establish RDP connection:

Remote Desktop can't connect to the remote computer for one of these reasons

RDP settings were reset in the portal and attempting to reset the VM password resulted in an error:

Deploy failed with deploymentStatusCode (Failure)

The VM agent stated it was ready and the VM access extension was deleted and re-created.

Solution:

(From James Sidwell)

I have found the problem. A group policy applied a block rule to ALL inbound traffic when on a private or public network.

I have moved the LIVE (source) VM to an OU that does not have that policy linked

Ran gpupdate /force on the Live VM

Ran a new backup

Restored to a new VM in the isolated subscription. I can now RDP to the restored VM.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please consider accepting answers as this helps increase visibility of this answer for other members of the Microsoft Q&A community. Thank you for helping to improve Microsoft Q&A!

User's image

Answer 2

James Sidwell 45

@kobulloc-MSFT thanks for that suggestion. The NSG was correctly setup to allow the RDP traffic.

I have found the problem. A group policy applied a block rule to ALL inbound traffic when on a private or public network.

I have moved the LIVE (source) VM to an OU that does not have that policy linked
Ran gpupdate /force on the Live VM
Ran a new backup
Restored to a new VM in the isolated subscription.

I can now RDP to the restored VM.

kobulloc-MSFT 26,801 Reputation points Microsoft Employee Moderator

2023-08-09T16:02:26.4566667+00:00

Thank you for the update, @James Sidwell !

Share via

Azure windows 11 VM reset password error = Deploy failed with deploymentStatusCode (Failure)

1 additional answer

Your answer