DomainTrustCheck failed Azure VDI

Question

DomainTrustCheck failed Azure VDI

Manoj Chauhan 105

Hi Team,

All of a sudden we are unable to use Azure VDI as DomainTrustCheck is failed, can anybody from microsoft team contact me and help me fix it ?

TIA

Manoj.

Jilakara Hemalatha 11,865 Reputation points Microsoft External Staff Moderator

2026-04-06T07:02:22.16+00:00
Hi Manoj,

Thank you for reaching out to Microsoft Support. We understand the impact of not being able to access your Azure Virtual Desktop environment and will help you resolve this at the earliest.

To better understand the issue and narrow down the root cause, could you please help us with the following details:

How many session hosts are part of the host pool, and how many are impacted? Is the issue limited to specific VMs? Is the issue affecting all users or only a subset of users?

During the issue, are users completely unable to connect, or is the session host marked unhealthy while some sessions remain active?

When did the issue first start? Were there any recent changes (Windows updates, application installs, GPO changes, etc.) around that time?

Is the issue intermittent or constant? If intermittent, how frequently does it occur?

Is the session host joined to on-premises Active Directory, Azure AD DS, or a hybrid setup?

Are there any session hosts in the same pool that are not affected? If yes, are there any differences (image, applications, configuration)?

What applications are installed on the affected session host (especially any recently installed or third-party tools)?

Are you able to access the affected VM using alternative methods such as Azure Bastion or RDP (outside AVD)?

If possible, please help us collect the below details when the issue is active:

From Event Viewer → Windows Logs → System, check and share any relevant errors around the time of failure, especially:

Netlogon (Event ID 5719)

GroupPolicy (Event ID 1054)

Tcpip (Event ID 4231)

Azure Portal Health Check Screenshot Navigate to: Azure Virtual Desktop > Host Pools > [Your Host Pool] > Session Hosts Click on the affected session host and share a screenshot of the Health Checks section, specifically the DomainTrustCheck entry and any error message shown.

Domain Connectivity Check

Open PowerShell as Administrator and run the following. Please share the output: Test-ComputerSecureChannel -Verbose nltest /sc_verify:<YourDomainName>

Additionally, please confirm if the VM is able to reach the domain controller during the issue by running:

nltest /dsgetdc:<yourdomain>

Could you please check private message and provide necessary details.
VEMULA SRISAI 11,340 Reputation points Microsoft External Staff Moderator

2026-04-09T14:33:20.53+00:00

Manoj Chauhan Our engineering team has reviewed the details and confirmed that Microsoft Entra Domain Services is currently suspended due to the associated Azure subscription being inactive. This is reflected by the health alert AADDS503.

As advised by engineering, please check the Azure Portal notifications and any email alerts sent by Microsoft, which should contain the required steps to reactivate the subscription. Once the subscription is active, the managed domain suspension will be lifted automatically and domain connectivity should be restored.

Please let us know once this is done or if you need assistance reviewing the notifications.