Forum Discussion

stevenzelenko's avatar
stevenzelenko
Brass Contributor
Mar 22, 2019
Solved

Different between Windows Virtual Desktop and Client Application Assignments in Azure AD

Can someone explain the difference of these two apps in AD?  It seems like at some point today something changed and I have to set my test users to be Tenant Creators in the Windows Virtual Desktop A...
  • Christian_Montoya's avatar
    Christian_Montoya
    Aug 07, 2019
    Feffen : The primary reason is that we only use Azure AD app role / assignments for 1 action, and that's to create a tenant. Otherwise, because you can create numerous host pools and app groups, we handle end-user assignments through our own PowerShell and our own implementation.
Christian_Montoya's avatar
Christian_Montoya
Icon for Microsoft rankMicrosoft
Aug 13, 2019
Glad you're up and running! As we depend on Azure AD and other Azure services, we are learning as we go in certain scenarios. Thanks for the patience and validating!
sarahpotrick2573's avatar
sarahpotrick2573
Copper Contributor
Nov 18, 2019

Christian_Montoya hey I am facing the same issue. i have added my users through powershell and also i have added them in my Entreprise application including windows virtual desktop and windows virtual desktop client. Everthing is in place also in my Enterprise  applications in properties i have set the the users assigned tab to NO still my users are not able to access the WVD and throwing the folllowing error:-

 pls help me with it as soon as possible also wen i add those users in AADC group they are able to access it and does not throw any error but for my environment i dont want all users to have the the admin access

  • Christian_Montoya's avatar
    Christian_Montoya
    Icon for Microsoft rankMicrosoft
    Nov 21, 2019

    sarahpotrick2573 : How did you configure Azure AD Domain Services? Does the domain match the UPNs those for the Azure AD user?

  • sarahpotrick2573's avatar
    sarahpotrick2573
    Copper Contributor
    Nov 19, 2019

    Christian_Montoya  Yes i checked it out and  is telling that user does not exist and that the VM is not joined.,But my VM is joined to my domain that i created through  Azure ADDS and also all of my users exists in the azure active directory and i have created that user in my azure active directory only.  I dont want all of my users to be in the AADC group i just want them to access the WVD environment Please find or help me out with some solution ASAP as i have been trying to resolve this from past 10 days and i need to deploy this in my client environment.

Resources