Hello Anindya Pal
This behavior typically occurred due to one or more of the following inside the affected VM, even when NSG rules were correct:
- Windows Firewall blocking port 3389
- RDP service (TermService) stopped or hung
- NIC-level NSG Association mismatch
- Guest OS network stack corruption
- VM routing issue resolved by redeploy
Steps to perform :
1.Confirm Effective NSG Rules :
Even if the NSG is shared, validate effective rules on the NIC.
Azure Portal → VM → Networking → Effective security rules
- Ensure Inbound TCP 3389 = Allow
- Check no higher‑priority Deny rule exists
2.Reset RDP & Windows Firewall Using Azure Run Command :
This step resolved the issue in most previously reported cases.
Azure Portal → VM → Run command → EnableRemoteDesktop
This action:
- Re‑enables RDP
- Resets Windows Firewall rules for 3389
- Restarts required services.
3.Test RDP Connectivity via Azure Network Watcher :
**Confirms whether traffic reaches the VM NIC.
Network Watcher → Connection troubleshoot
- Destination port: 3389
- Result should show Reachable
4.Redeploy the VM:
If RDP is still failing, VM redeploy has resolved several identical cases by resetting:
- Host networking
- Hypervisor routing
- Underlying fabric issues
Azure Portal → VM → Redeploy + reapply(Left Pane)
Redeploy does not delete disks but causes VM downtime.
5.Validate Guest OS Firewall :
If Serial Console / Bastion is available:
https://learn.microsoft.com/en-us/azure/network-watcher/connection-troubleshoot-manage?tabs=portal
https://learn.microsoft.com/en-us/azure/virtual-machines/windows/run-command?tabs=portal%2Cpowershellremove
Thanks,
Manish Deshpande.