Unable to Connect to Azure Virtual Desktop VM

Question

Hello,

I am currently setting up Azure Virtual Desktop (AVD) using the quickstart deployment for evaluation, but I am facing issues connecting to the virtual machine (VM). Here's an overview of the problem:

1. Remote Desktop Client Issue:

• I am using the "Remote Desktop" client recommended by Microsoft. (https://learn.microsoft.com/en-us/azure/virtual-desktop/users/connect-remote-desktop-client?tabs=windows)
• I can log into the client and see the VM listed.
• However, when I try to connect, it gets stuck in an initialization loop and never progresses.

2. Web Portal Issue:

• When I attempt to connect via the web portal (https://client.wvd.microsoft.com/arm/webclient/index.html), I receive the following error: "SessionDesktop: Sign in failed. Please check your username and password and try again."
• This error occurs regardless of whether I use Entra ID SSO or manually enter the username and password.

3. Windows App Issue:

• I also tried connecting using the Windows App Portal (https://windows365.microsoft.com/ent#/devices)
• When attempting to connect, I receive the following error: "Disconnected: Sign in failed. Please check your username and password and try again."
• To rule out user error, I am copying passwords directly from a password manager to ensure they are correct.
• This error occurs regardless of whether I use Entra ID SSO or manually enter the username and password.

4. Public IP Connection:

• As a troubleshooting step, I added a public IP to the VM and was able to connect successfully using the standard Remote Desktop Connection client included with Windows.
• However, this approach is not ideal, as it exposes the VM's IP/port to the internet, which is contrary to AVD's intended secure design.

5. Configuration Details:

• I have assigned the following roles to the VM:
• Virtual Machine Administrator Login
  • Virtual Machine User Login
  • I also hold these roles myself, and I was assigned to the VM during its creation.

6. Authentication and Policies:

• The Entra ID logs show no authentication errors.
• Per-user MFA is disabled.
• Conditional Access Policies (CAPs) that involve MFA are configured to exclude Azure Virtual Desktop and Azure Windows VM sign-ins.

7. Troubleshooting Attempts:

• I've followed every relevant suggestion from the many forum posts about this same topic.
• I verified that the VM is running, and I can connect to it using the Azure Cloud Shell. However, I need GUI access to the desktop.
• I can connect to the VM using the default Windows RDP client when exposing a public IP on the VM.
• I tried many different methods to access the VM.
• Changed conditional access policies to exclude Azure Virtual Desktop and Azure Windows VM sign-ins.
• Ensured per-user MFA is disabled
• I have assigned the following roles to the VM and myself:
  • Virtual Machine Administrator Login
  • Virtual Machine User Login

Despite these efforts, I am unable to determine what is causing this issue. Is there something I might have overlooked in my configuration or setup? Any guidance or suggestions would be greatly appreciated.

Thank you in advance for your help!