Forum Discussion

PavithraT's avatar
PavithraT
Icon for Microsoft rankMicrosoft
Apr 30, 2020

Spring Update 2020 is in Public Preview!

Today we have announced public preview of our next update which comes with several improvements. See here where Brad Anderson and Julia White summarize our most exciting capabilities:https://www.mi...
moclouds's avatar
moclouds
Copper Contributor
May 17, 2020

PavithraT 

 

Works great excepting any attempt at administration; I am the Global Administrator for the domain in Azure Active Directory.

 

When accessed through https://rdweb.wvd.microsoft.com/arm/webclient/index.html,UAC does not accept mailto:username@domain.com + Password.

 

When accessed through RDP; "The connection was denied because the user account is not authorized for remote login".

 

If unable to elevate privilege via WVD and also unable to set for remote login over RDP; how does one administer the WVD VMs?

 

Thank you in advance for your time and attention.

 

 

patrickkoehler's avatar
patrickkoehler
Brass Contributor
May 18, 2020

moclouds 

 

I don´t think that this is a WVD issue. 

Did you check your Desktop application group to see if your user / security group is added successfully? 

On the other hand, are there any kind of hardening GPOs enabled which prevent the access via RDP? 

 

Thanks!

Patrick 

  • moclouds's avatar
    moclouds
    Copper Contributor
    May 18, 2020

    patrickkoehler 

     

    So appreciate the response.

     

    Agreed. WVD is working perfectly and I can go to my desktop at will using my Global Administrator username in the form of mailto:jd@domain.com plus the password.

     

    The issue arises AFTER I am ON the WVD desktop where, for instance, I can run [Windows PowerShell].

     

    However, when I run [Windows PowerShell (Admin)], UAC comes up and I can not find any combination of username and password that works.

     

    So I guess the proper question is; "what form of my username and password should I use in WVD for UAC?"

     

    Hopefully that makes sense.

     

    As for direct RDP; when I am on the WVD desktop I can see that the "Enable Remote Desktop" is set to On. I can not change that of course because it also says in red letters, "Sign in as administrator to change this setting". Point being you may be right about a GPO. Apologies as I do not know how to check.

     

    So either resolution would be helpful; either get through UAC in WVD or externally access via RDP.

     

    Thank you in advance for your time and attention.

     

    JD

    • cvanaxel's avatar
      cvanaxel
      Brass Contributor
      May 18, 2020

      moclouds 

       

      WVD is GPO and domain level access. So if you have an Enterprise or Domain Admin account. You can open your powershell as administrator with that account.

      • moclouds's avatar
        moclouds
        Copper Contributor
        May 18, 2020

        cvanaxel 

         

        Woo Hoo 🙂

         

        You put me on the right track. I found the [Groups] in AADDS and put myself into the "AAD DC Administrators" group. Shazam! I was able to load and run PowerShell as Administrator.

         

        Thank you so much for your suggestion.

         

        JD

Resources