Connection Error on Bastion with AVD

Pavel yannara Mirochnitchenko 12,596 MVP

I have AVD setup with AzureAD only in my test lab. With user account, I can connect to VM via RDP client and web client. End user is also member of local RDP users. VM has basic network security set with 443, 80, SSH and 3389 port opened. I deployed Bastion and I cannot connect. I tested also local admin credits, both cannot connect.

Connectivity works fine (it seems like it)

5 answers

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-07-13T11:08:52.703+00:00

Hello @Pavel yannara Mirochnitchenko ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you are trying to connect to your AVD using Azure Bastion and getting a connection error.

As of today, Bastion connectivity to Azure Virtual Desktop isn't supported.
Refer : https://learn.microsoft.com/en-us/azure/bastion/bastion-faq#virtual-desktop

If you wish you may leave your feedback in the below forum requesting this feature. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.
https://feedback.azure.com/d365community/forum/8ae9bf04-8326-ec11-b6e6-000d3a4f0789

In the mean time, you can take a look into the new feature of Azure Virtual Desktop called RDP Shortpath for managed networks.
Refer : https://learn.microsoft.com/en-us/azure/virtual-desktop/shortpath

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-13T14:54:52.343+00:00

Thanks for your answer. I wonder why all AVD study material still refers to Bastion as part of it. I also know folks are connecting to Session hosts with Bastion if they are hybrid joined.

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-07-14T07:21:41.523+00:00

Hello @Pavel yannara Mirochnitchenko ,

Could you please share the doc links for AVD which refers Bastion as part of it?

At this time, you can use Azure Bastion to log in with Azure AD authentication via the Azure CLI and the native RDP client mstsc.
Refer : https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows#log-in-by-using-azure-ad-credentials-to-a-windows-vm
https://learn.microsoft.com/en-us/azure/bastion/connect-native-client-windows

But not sure if this works for Azure Virtual Desktop session hosts as per our doc, Bastion connectivity to Azure Virtual Desktop isn't supported. I will check with the backend team for a confirmation and get back to you on this.

Regards,
Gita

Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-14T08:37:00.723+00:00

I watched 1 year old AZ-140 train materian in Youtube where this guy talks about Bastion together with AVD.

Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-14T08:38:36.767+00:00

And in MeasureUP AZ-140 I saw this question and selected answer is correct based on MeasureUP :D
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-14T07:03:06.257+00:00

To be able to set .\localadmin with .\ you need to switch keyboard layout to something else than EN-US and then you will get it. This is solved.
Please sign in to rate this answer.
GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-07-14T07:23:31.917+00:00

Hello @Pavel yannara Mirochnitchenko ,

Thank you for the update.

Could you please confirm that you are able to connect to your Azure Virtual Desktop via Azure Bastion?
If yes, I will discuss this with the backend team to get more clarity on the scenario.

Regards,
Gita

Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-14T08:33:35.34+00:00

Yes I could. I connected via Baston to single Session Host with local admin account which was created during the VM creation.

This was successfull logon.

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-07-14T08:51:33.793+00:00

Thank you for the update, @Pavel yannara Mirochnitchenko .

I will discuss this with the Azure Bastion Product Group team to get a confirmation and also check why we are still stating that Bastion connectivity to AVD isn't supported.
Once I get the updates, will share the same here.

Regards,
Gita Sharma

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-08-04T18:12:24.523+00:00

Hello @Pavel yannara Mirochnitchenko ,

I checked with the Azure Bastion Product Group team and looks like Bastion login to Azure Virtual Desktop (AVD) is now supported through IP connect. And they are doing some more testing before updating the doc to reflect this information.

Regards,
Gita
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Sanket Patil 1 Reputation point

2022-07-18T05:48:26.563+00:00

The error could happen when the Azure Bastion does not make provision well or you are deleting the Bastion service (it takes a few minutes to delete the service). After Bastion has been deployed to the virtual network, the screen changes to the connect page. In this case, you could delete the failed Bastion service.

Regards,
J Wick
Please sign in to rate this answer.
Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-07-18T06:23:24.723+00:00

I already deleted bastion once and re-deployed. It still has the same behavior.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-12-21T10:07:28.163+00:00

I don't have anymore the option to change keyboard layout so I cannot set .\admin anymore because bastion does not read additional keys.
Please sign in to rate this answer.
GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2022-12-22T17:59:18.183+00:00

Hello @Pavel yannara Mirochnitchenko ,

Azure Bastion still supports certain keyboard layouts as mentioned in the FAQ.
Refer : https://learn.microsoft.com/en-us/azure/bastion/bastion-faq#keyboard

Also, as mentioned in the doc:

To establish the correct key mappings for your target language, you must set the keyboard layout on your local computer to your target language and the keyboard layout inside the target VM to your target language. Both keyboards must be set to your target language to establish the correct key mappings inside the target VM.

To set your target language as your keyboard layout on a Windows workstation, navigate to Settings > Time & Language > Language & Region. Under "Preferred languages," select "Add a language" and add your target language. You'll then be able to see your keyboard layouts on your toolbar. To set English (United States) as your keyboard layout, select "ENG" on your toolbar or click Windows + Spacebar to open keyboard layouts.

Could you please validate this and let me know what is the current behavior you are seeing at your end?

Regards,
Gita
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Pavel yannara Mirochnitchenko 12,596 Reputation points MVP

2022-12-28T17:19:57.95+00:00

I solved this already by going to Bastion properties, there I can select Swedish keyboard which gives me the back slash. Thanks for your efford.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Connection Error on Bastion with AVD

5 answers

Your answer