Forum Discussion

tomgow's avatar
tomgow
Copper Contributor
May 07, 2025

AVD with FSLogix - profiles not loading

Setup AVD with FSLogix several months back and profiles had been loading fine. About a month ago, profiles stopped loading and the logs show "Account restrictions are preventing this user from signin...
AVD
FSLogix
FSLogix issues
Group Policy
Windows App
tomgow's avatar
tomgow
Copper Contributor
May 09, 2025

Additional info:

Profiles are stored on an Azure file share.

The storage account is AD joined.

As a test, I redirected the profile to store on the local D drive of the AVD (via registry setting) and it worked fine.

When connected to the AVD and the profile fails to load from the Azure file share, I can map a drive to and access that same file share if I choose the option 'login as a different user' and re-enter my same login credentials. (if i don't re-enter credentials, it will fail with the account restrictions error.)

  • Chris_toffer0707's avatar
    Chris_toffer0707
    Iron Contributor
    May 09, 2025

    Could you share your configuration for permissions both in Azure and NTFS on the Azure File Share. 
    Users needs to have the Storage File Data SMB Share Contributor in Azure on the storage account , and "create folders" permissions on the folder of the fslogix container. 
    Also I can not read of the discussions if users are synced from Active Directory to Entra ID and the group membership of Storage File Data SMB Share Contributor is granted to the users via a group?

     

    • tomgow's avatar
      tomgow
      Copper Contributor
      May 09, 2025

      We have a group called AVD Users and that group does have 'Storage File Data SMB Share Contributor' access on the storage account. On the file share, that group has modify access to 'this folder only'. My regular account and the people that use the virtual desktops are in the AVD Users group.

    • tomgow's avatar
      tomgow
      Copper Contributor
      May 09, 2025

      Thanks Chris. Yes, we have a group "AVD Users" that has "Storage File Data SMB Share Contributor" rights on the Azure storage account. My regular account as well as that of the people that connect are in that AVD Users group. On the file share, the AVD Users group has modify access to 'this folder only'.

      This had been working up until late March / early April. I'm 99% sure no Azure settings were changed by myself or manager. The desktops do get monthly updates and FSLogix app updates as well. One of the weirdest things, the profile will load correctly about 1 in 20 times. 🤔

      • Chris_toffer0707's avatar
        Chris_toffer0707
        Iron Contributor
        May 10, 2025

        Very strange issue. One thing that crossed my mind is to check if the Azure File Share provisioned storage capacity is running near 100%? 

         

        Also, could you provide us the error codes that FS Logix outputs in the event log of the session host? 

Resources