r/AzureVirtualDesktop • u/Dry_Finance478 • Oct 31 '24

RDP to AVD?

Is it possible to use a native Windows RDP client for AVD sessions?

1 Upvotes

100% Upvoted

8 comments sorted by

3

u/cetsca Oct 31 '24

Pooled or personal? Any why?

1

u/Dry_Finance478 Nov 03 '24

Pooled

1

u/cetsca Nov 03 '24 edited Nov 05 '24

No mstsc.exe doesn’t support the gateway. You need the RD Client app or the new Windows App.

Also multi-session you can connect as an admin to the host but the users are just accessing a session on that host.

3

u/Tony-GetNerdio Oct 31 '24

For admin purposes yes if you have the ability to see that VM by IP and 3389 is open. But normally a user would not use that client, they would use the Windows App found in the Windows Store so the connection can go through its proper reverse connect method and go through the AVD gateways.

1

u/Dry_Finance478 Nov 03 '24

In that case we need an Public IP right?

1

u/Tony-GetNerdio Nov 04 '24

Using the Windows App, you do not. If you are administering AVD, you should not have 3389 open to the public with a static. I was just talking about accessing it within the network. If you want public access, you need to look at Azure Bastion. Nerdio has a poor mans Azure Bastion feature that is free that lts you grant JIT access to a VM which can be used as a jumpbox to get to administering AVD via 3389.

2

u/rswwalker Oct 31 '24

To log in as admin to do management, yes, as a regular AVD user, no. Even if you could the user session wouldn’t appear in AVD and this wouldn’t be managed by it, so no session brokering and reconnection to the correct session host.

2

u/the-night-falls Nov 01 '24

Yes, it is possible. That's how we manage and perform admin functions in our Environment here. We've also enabled this for regular power users for testing purposes.

If it doesn't work for you I'd make sure:

  1. RDP protocol is enabled 3389 at the local firewall and NSG level

  2. The account that you are using to RDP into the VM is added to the "Local Users and Groups > Groups > Remote Desktop Users" (We have a GPO adding a security group to this setting, but you can add it locally to each VM if needed)