Hi,
You don't have permission to create resource group in sandbox.
On Networking tab, did you add inbound port rule for 3389? This is required so that you can connect using RDP.
Which specific learning module are you working on? Please post the URL.
Thanks.
-TP