Azure RDP Connection Issue

Irin Sultana 371

Hi ,

I am having issue for Azure RDP connection. When i try to login at on premies (office) , It's giving an error message. But from home i can easily login in, it does not give any issue.

FYI, On - premies it was giving same issue before, all of sundden it fixed automatically. Now, the error came back.

I could not figure out the issue . Please help me to solve this issue.

Thank You!

Irin Sultana

User's image

1 answer

Olga Os - MSFT 5,836 Reputation points Microsoft Employee

2023-11-28T18:47:41.49+00:00
Hello Irin Sultana,

There could be a multitude of reasons why you are receiving this login error message.

To narrow down the cause, I'd recommend to review the security events on the server for the failed attempts in question. Details on events below could tell you the reason, as example "User logon with misspelled or bad user account", "User logon to account disabled by administrator", etc.

Check those:

4625 (4625(F): An account failed to log on)

4624 (4624(S): An account was successfully logged on)

4776 (4776(S, F): The computer attempted to validate the credentials for an account)

As example, event 4625 is logged for any logon failure. It generates on the computer where logon attempt was made, for example, if logon attempt was made on user's workstation, then event will be logged on this workstation. This event generates on domain controllers, member servers, and workstations.

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards,

Olga Os.
Please sign in to rate this answer.
Irin Sultana 371 Reputation points

2023-11-30T21:34:35.6166667+00:00

Hi Olga,

Thank you for your quick response! I checked the logs but i could not find anything . That's why can not figure out the issue. When i rebooted the server it fixed automatically, but it comes back again.

Thank You!

Irin Sultana

Olga Os - MSFT 5,836 Reputation points Microsoft Employee

2023-11-30T21:44:49.33+00:00

Hmmm, unless you are attempting to login somewhere else, you should have those attempts logged in the security events on the server Irin Sultana.

Irin Sultana 371 Reputation points

2023-11-30T21:48:05.1566667+00:00

Hi ,

There are security logs but all showing success no failure.

Thank You!

Irin Sultana

Olga Os - MSFT 5,836 Reputation points Microsoft Employee

2023-11-30T22:52:14.05+00:00

Irin Sultana,

Other options to narrow down the problem:

Are you login to a Windows virtual machine in Azure by using Microsoft Entra ID? If yes, check those solutions.

The next time, when you will get this failure, please test if you can access Azure VM by using the Serial Console in the Azure Portal.

Try to access the same server by using another device.

Is it standalone Azure VM or AVD?

Also, please make sure you are using the correct user name format.

In the Windows Security window, select More choices and then Use a different account. Enter the credentials for an account on the virtual machine and then select OK

Local account: This is usually the local account user name and password that you specified when you created the virtual machine. In this case, the domain is the name of the virtual machine and it is entered as vmname*username*.

Domain joined VM: If the VM belongs to a domain, enter the user name in the format Domain*Username*. The account also needs to either be in the Administrators group or have been granted remote access privileges to the VM.

Domain controller: If the VM is a domain controller, enter the user name and password of a domain administrator account for that domain.

Sincerely,

Olga Os.

Irin Sultana 371 Reputation points

2023-11-30T22:54:54.2033333+00:00

Hi Olga,

Thank You for your advices! I am guessing it's maybe NTLM authentication issue.

Thank You!

Irin Sultana

Olga Os - MSFT 5,836 Reputation points Microsoft Employee

2023-11-30T23:20:21.38+00:00

Understood. Please keep us posted if you will find the cause of the problem.

Sincerely,

Olga Os.
Sign in to comment