Azure Virtual Desktop unable to connect.

hi there )) thanks for posting this on q&a,

so u mentioned ur colleague set up avd with entra id but cant connect via rd web client... )), make sure the user accounts have the right 'virtual machine user login' role assigned.

check if the session host vm is running )) sounds obvious but hey, it happens %). u can verify its status in the azure portal under 'virtual machines'.

sometimes its just the browser cache playing tricks. try incognito mode or clear cache, this might help in other tools too https://docs.microsoft.com/en-us/azure/virtual-desktop/troubleshoot-client

worth looking into the network security groups as well. if the inbound rules block rdp, well... no connection )) https://docs.microsoft.com/en-us/azure/virtual-desktop/network-connectivity

oh and dont forget the app groups! users wont see anything if they're not assigned https://docs.microsoft.com/en-us/azure/virtual-desktop/manage-app-groups

as well check this... if the accounts are fresh, maybe the entra id sync needs a minute. yes, cloud magic takes time sometimes )

hope this helps ))

Best regards,

Alex

and "yes" if you would follow me at Q&A - personaly thx.
P.S. If my answer help to you, please Accept my answer

https://ctrlaltdel.blog/

Hello @VanDeLacimo

Firstly, enable the role for the user with the Virtual Machine User Login.

To troubleshoot AVD VM that are in a Running state but report a Shutdown health status, begin by restarting the VM from the Azure portal to resolve any potential state inconsistencies. Additionally, verify the Azure VM Agent status to ensure it is running and up to date. If issues persist, consider resetting or upgrading the agent following the recommended steps provided in the Azure documentation.

Please follow the below given steps-

1. Navigate to the VM\Extensions + applications
2. Note the Version, for Win11ms, I would expect 2.2.0.0.
3. Click the Uninstall button.
4. Reboot the VM
5. Once the VM is back online after reboot, open Cloud Shell
6. Run the following in Cloud Shell substituting in your Resource Group name, VM name, and Location.

Set-AzVMExtension -ResourceGroupName

In the Azure portal, go to AVD VM > Select Access Control (IAM) > Select Role Assignments > Confirm that the user account has been granted either the Virtual Machine User Login or Virtual Machine Administrator Login role.

Ensure that the RDP property targetisaadjoined:i:1 was added to the AVD host pool. To do this, navigate to the Azure portal > Select the host pool configured for Azure AD Join > Select the RDP Properties blade > Select the Advanced Tab > Add targetisaadjoined:i:1.

Disable security defaults by navigating to Entra ID > Manage > Properties > Manage Security Defaults > Disable.

Add Conditional Access policies to exclude the VM from MFA by adding the user.

Enable Conditional Access policies and exclude the users and groups as needed.

I would suggest access the AVD VM's from windows app.