Unable to login to AVD session - Error Code: 0x3000047

Tariq Ghouri 25 Reputation points
2025-05-12T15:00:21.2166667+00:00

Users are experiencing issues logging into the AVD session, receiving the following error:

An error occurred while accessing this resource. Retry the connection or contact your system administrator. For more tips on how to resolve the issue, refer to the Troubleshooting Guide   
Error code: 0x3000047   
Extended error code: 0x0   
Timestamp (UTC): 2025-05-12T12:35:35.261Z 
Activity ID: 16b39503-4108-4512-81b5-826456a90000.

Attempts to resolve this include removing and re-adding users in Desktop App Group Assignments and assigning the users to the [Desktop Virtualization User] and [Virtual Machine User Login] roles in the AVD VM. Despite these efforts, users remain unable to log in.

Azure Virtual Desktop
Azure Virtual Desktop
A Microsoft desktop and app virtualization service that runs on Azure. Previously known as Windows Virtual Desktop.
1,841 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Nikhil Duserla 7,935 Reputation points Microsoft External Staff Moderator
    2025-05-12T15:35:16.7033333+00:00

    Hello @Tariq Ghouri,

    Please follow below steps-

    1. Navigate to the VM\Extensions + applications
    2. Note the Version, for Win11ms, I would expect 2.2.0.0.
    3. Click the Uninstall button.
    4. Reboot the VM
    5. Once the VM is back online after reboot, open Cloud Shell
    6. Run the following in Cloud Shell substituting in your Resource Group name, VM name, and LocationAzure PowerShellAI ConvertCopy
            Set-AzVMExtension -ResourceGroupName "<RESOURCE GROUP NAME>" -VMName "<VM NAME>" -Name "AADLoginForWindows" -Location "<LOCATION>" -Publisher "Microsoft.Azure.ActiveDirectory" -Type "AADLoginForWindows" -TypeHandlerVersion "2.2"
         
         
         
      

    Ensure user must have Virtual Machine User Login or Virtual Machine Administrator Login role

    In Azure portal go to AVD VM > Select Access control (IAM) > Select Role Assignments > Confirm the User account has been granted Virtual Machine User Login or Virtual Machine Administrator Login

    Checked have the necessary licenses to allow multiple users to connect to the virtual machine.

    Ensure RDP property targetisaadjoined:i:1 was added to the AVD host pool. So, add going through. Navigate to Azure portal > select host pool configured for Azure AD Joined > select RDP Properties blade > Select Advanced Tab > added- targetisaadjoined:i:1

    May have "per user MFA" enabled - which does not work with AVD, disable it. as per:  Log in to a Windows virtual machine in Azure by using Microsoft Entra ID - Microsoft Entra | Microsoft Learn

    If you have any further queries, do let us know.

    0 comments No comments

  2. Alex Burlachenko 10,255 Reputation points
    2025-05-13T11:38:05.13+00:00

    Dear Tariq Ghouri

    thank you for reaching out about the login issue with Azure Virtual Desktop. I understand how frustrating it can be when users cannot access their sessions. Let me explain the possible causes and solutions for error code 0x3000047 in a simple way.

    This error usually happens when there are permission problems or configuration issues in Azure Virtual Desktop.

    First, make sure the users have the correct roles assigned in Azure. They need both the Desktop Virtualization User role and the Virtual Machine User Login role to access the AVD session. You can check the role assignments in the Azure portal under Access Control (IAM) for the virtual machine or host pool. Microsoft’s official documentation explains this in detail here: Assign the Virtual Machine User Login role in Azure.

    Next, verify that the users are properly added to the Desktop Application Group. If they were recently added, it might take some time for changes to apply. You can try removing and re-adding them to refresh the permissions. Microsoft provides guidance on managing app groups here: Manage app groups for Azure Virtual Desktop.

    Another common issue is network connectivity. Ensure that the session host virtual machine has proper internet access and can communicate with Azure services. Sometimes, firewalls or network security groups block the required connections.

    If the problem continues, check the session host’s health in the Azure portal. A failing or overloaded session host can cause login errors. Restarting the virtual machine might help.

    Finally, if none of these steps work, reviewing the Azure Virtual Desktop logs can provide more clues. The logs may show specific errors that explain why the login is failing. Microsoft’s guide on diagnostics and logging is here: Diagnostics and logging for Azure Virtual Desktop.

    I hope this helps resolve the issue.

    Best regards,
    Alex
    P.S. If my answer help to you, please Accept my answer
    PPS That is my Answer and not a Comment
    https://ctrlaltdel.blog/
    

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.