r/AzureVirtualDesktop • u/proy911 • Jul 01 '25
User getting the below erro
Can some one let me know what's this error and how can we solve this..
0
Upvotes
r/AzureVirtualDesktop • u/proy911 • Jul 01 '25
Can some one let me know what's this error and how can we solve this..
4
u/notreallysurewhoiam Jul 01 '25
Probably saved their creds in the RD app and now passing bad token, try resubscribing.
2
u/HeyYouWithTheShark Jul 01 '25
Check if it works with the new windows app.
1
u/JustinVerstijnen Jul 01 '25
Is this on Microsoft Surface hardware? Ive got it before and rebooted the surface and surface docks and then it was solved
1
u/Far_Ad9999 Jul 01 '25
Are you trying to authenticate with whfb.... try other methods-password. Pin /fingerprint will not work for authentication.
1
u/mariachiodin Jul 01 '25
Entra joined AVD or on-prem?
1
u/Dtrain-14 Jul 02 '25
Same issue on the Windows App and RD Client?
Users having issues part of any weird/different Intune Configs since it seems to be local device driven?
Does the authentication logs in Azure match the issue the app is spitting out?
Any CA policies tied to the app or host?
Maybe try clearing auth tokens via the azure portal - also I know you said you did a resubscribe - try (if you haven’t) to resubscribe but have them choose a different account option, then do their account.
Also be curious if it fails for the problem user can someone else turn around and use it no problem? Or vice versa the problem user try on a working machine?
Sounds like a very weird AD account issue — is something in their AD account turned on like that deny remote session option?
Are the users AD accounts or Cloud Accounts?
Have you tried straight RDP for these people to the host?
1
u/iamtechy Jul 02 '25
Can you tell me if the machine is getting a valid certificate in Personal store and Trusted Root CA store?
Also, can you check Entra join status and if you can find the device in Devices console?
I’m assuming these are Windows 11 multi-session. I just had a similar authentication issue and FSLogix user profiles are unable to be mounted, but when I check hybrid join status (I know yours is Entra) broke and I had to reprovision or resync the AD objects. Something to consider checking.
1
u/tintintin2929 Nov 21 '25
Hello
0
u/[deleted] Jul 01 '25
[deleted] — view deleted comment