User is unable to connect avd

Question

User is unable to connect avd

shamim 0

User is part of avd pool desktop but she is not able to connect.

Manish Deshpande 6,835 Reputation points Microsoft External Staff Moderator

2026-05-27T21:19:38.16+00:00

@shamim

Thanks for reaching out to Microsoft Q&A.

Step 1 – App Group Assignment (most likely culprit) Being in the host pool ≠ having access. The user must also be assigned to the Desktop App Group tied to that pool. This single oversight causes the majority of "user can't connect" AVD tickets.

Step 2 – License AVD requires M365 E3/E5, Business Premium, or Windows Enterprise E3/E5. Missing or incorrect license silently blocks access.

Step 3 – Session Host Status The host itself may be in "Unavailable" or "Needs Assistance" state, or have "Allow New Sessions" turned off — both prevent connections even with correct assignments.

Step 4 – Conditional Access / MFA A blocking CA policy (MFA not configured, non-compliant device) shows up as a connection failure from the user's side. Entra sign-in logs will reveal this immediately.

Step 5 – Client error code Asking for the exact error code the user sees is the fastest way to pinpoint the issue if the above steps don't resolve it.

Thanks,
Manish.

1 answer

Your answer

Manish Deshpande 6,835 Reputation points Microsoft External Staff Moderator

2026-05-27T21:19:38.16+00:00

@shamim

Thanks for reaching out to Microsoft Q&A.

Step 1 – App Group Assignment (most likely culprit) Being in the host pool ≠ having access. The user must also be assigned to the Desktop App Group tied to that pool. This single oversight causes the majority of "user can't connect" AVD tickets.

Step 2 – License AVD requires M365 E3/E5, Business Premium, or Windows Enterprise E3/E5. Missing or incorrect license silently blocks access.

Step 3 – Session Host Status The host itself may be in "Unavailable" or "Needs Assistance" state, or have "Allow New Sessions" turned off — both prevent connections even with correct assignments.

Step 4 – Conditional Access / MFA A blocking CA policy (MFA not configured, non-compliant device) shows up as a connection failure from the user's side. Entra sign-in logs will reveal this immediately.

Step 5 – Client error code Asking for the exact error code the user sees is the fastest way to pinpoint the issue if the above steps don't resolve it.

Thanks,
Manish.

Answer 1

Use the following checks to troubleshoot why the user in the Azure Virtual Desktop (AVD) pool cannot connect:

Confirm the user has app group assignments
- Even if the user is in the host pool, they must be assigned to one or more AVD application groups (Desktop or RemoteApp) to see and launch resources.
- Run in PowerShell (with Az module and appropriate permissions):
```
     Get-AzRoleAssignment -SignInName <userUPN>
```
- Verify that the user is assigned to the correct AVD application group(s). If not, assign the user (or a supported security group) to the app group and have the user refresh the workspace.
Verify the correct account and cached credentials
- Ensure the user signs in with the same Microsoft Entra account that was assigned to the AVD application group.
- If using the web client, clear cached credentials or use an InPrivate/Incognito browser session, then have the user sign in again and refresh the workspace.
Check group type in Microsoft Entra ID
- If the user is assigned via a group, confirm the group is a security group, not a distribution group. AVD does not support Microsoft Entra distribution groups for app group assignment.
- If it is a distribution group, create or use a security group instead, add the user, and assign that security group to the AVD application group.
If the user recently moved tenants or subscription changed ownership
- If the subscription or user was moved between Microsoft Entra tenants, user assignments may be tied to the old tenant. Reassign the user to the AVD application groups in the current tenant.
- If a CSP provider created the subscription and it was later transferred, re-register the AVD resource provider:
  1. In Azure portal, go to Subscription → select the subscription.
  2. Select Resource provider.
  3. Find Microsoft.DesktopVirtualization and select Re-register.

After these steps, have the user refresh the AVD workspace (or sign out and sign back in) and attempt to connect again.

References:

Troubleshoot Azure Virtual Desktop service connections

Share via

User is unable to connect avd

1 answer

Your answer