Session Desktop application does not show up for members of the Desktop Application Group in new Windows App

Hi Dragan Gataric,  

Thank you for reaching out to Microsoft Q&A portal.  

To assist you further and identify the root cause, we kindly request you to check few things from the Azure portal and on the affected client machine.   

  1. Once verify the "Preferred Application Group Type" of your Host Pool. To check this, follow the below steps:  

• Go to Azure Portal > Azure Virtual Desktop > Host Pools.  
• Select the relevant host pool.  
• On the Overview tab, locate the setting for Preferred application group type.  Please confirm if this setting is configured as “Desktop”. If this is set to “RemoteApp”, users will not see the full desktop experience even if assigned correctly.  

2.Once Confirm if the users are assigned to the correct Desktop Application Group (DAG). To check this, follow the below steps:  

• In the Host Pool, select Application groups from the left-hand menu.  
• Click on your Desktop Application Group (not a RemoteApp group).  
• On the left pane, go to Assignments.  Please confirm that the correct users or user groups are explicitly listed and assigned here.     3. Also confirm your Session Host Availability. To check this, follow the below steps:  
• Go to the Host Pool in Azure Portal.  
• Click on Session Hosts from the left menu.  Check whether at least one session host is showing as “Available”. If all session hosts are in states such as “Unavailable”, “Unhealthy”, or “Disconnected”, the desktop won’t be accessible to users.  

  4.Review the Windows App Version and Client Cache. To check this, follow the below steps:  

• On your device, open the new Windows App.  
• Click on the Settings to view the version number.  Please share the Windows App version in use.  

 Additionally, once remove and re-add the workspace. This can resolve issues caused by stale or cached entitlements.  

  And also, please let us know few more things:  

• Whether any changes were made recently to the VM images (e.g., switching to Community Gallery)?  
• Were any Conditional Access, Intune, or Azure AD Join policies applied recently?  

These details will help us determine whether a recent configuration or policy change may be contributing to the issue.  

@Rashmika Inagadapa Hello again, sorry for the late reply, I was on vacation :D

I checked everything from the list you provided above.

The only thing I have a difference is the type of preferred app group. I have it on "RemoteApp", not "Desktop". But even after the change, I try to refresh the Windows application, but I have the same problem.

Also, nothing mayor have happened on Azure or added some specific conditional access policy on the portal.

Can you tell me if you have any other ideas what the problem could be?

Hi Dragan Gataric,

Thanks for confirming on the previous checks and for updating the Preferred Application Group Type. Since the Session Desktop still does not appear, there is one more area to check that has impacted several Azure Virtual Desktop environments.

There have been cases where the Azure AD enterprise application for Azure Virtual Desktop had the User assignment required property set to “Yes,” due to recent behavior changes. When this happens, users will not see any desktops in the Windows App unless they are explicitly assigned to the enterprise application, even if they are already in the correct Desktop Application Group.

Below are few checks to identify the issue:

1. Check the Enterprise Application Setting in the Azure Portal

·       Sign in to Azure Portal as a Global Administrator (or an admin who can manage Enterprise Applications).

·       Navigate to Azure Active Directory → Enterprise applications.

·       Search for Windows Virtual Desktop and select the correct entry (if you have more than one, verify which one is linked to your AVD setup by reviewing the App ID or checking the “Assignments” list).

·       In the left menu, select Properties.

·       Locate User assignment required. If it is set to Yes, change it to No and click Save.

§   If You Must Keep “User assignment required” = Yes

§  In the same enterprise application, go to Users and groups → Add user/group.

§  Assign the affected users or security groups that require access to the Session Desktop.

§  Save the changes.

2.You can also use PowerShell commands to Disable the Setting

# Connect to Azure AD

Connect-AzureAD

# Get the Windows Virtual Desktop enterprise application

$sp = Get-AzureADServicePrincipal -All $true | Where-Object DisplayName -Like "Windows Virtual Desktop"

# Disable user assignment requirement

Set-AzureADServicePrincipal -ObjectId $sp.ObjectId -AppRoleAssignmentRequired $false

# Verify change

Get-AzureADServicePrincipal -ObjectId $sp.ObjectId | Select DisplayName, AppRoleAssignmentRequired

After performing the above steps, refresh the Windows App and sign out of the Windows App, then sign back in. If the desktop still does not appear, remove the workspace, close the app, clear cache and then re-add the workspace.

Kindly check the above setting and share your response. If you require further assistance let me know. I am happy to help you with the queries.

Thanks,

Rashmika