Forum Discussion

_CyberSamurai_'s avatar
_CyberSamurai_
Copper Contributor
Jan 18, 2022

Remote Desktop authentication to AVD (AADDS) asks for PIN by default

Hi All,

at our customers, we noticed that the PIN is asked first if a user logon to AVD Session-Host. It`s the Authentication to AADDS.
As you can see in Screenshot. User try to logon via PIN which is for sure not working. The user has to choose "more options (green)" to choose "Other Account (red)"

I am searching for a possibility, that Username-Password authentication is default.

 

If i understand correctly, AADDS, AVD and the Session-Host((Windows 10 Enterprise for Virtual Desktops 20h1-evd)) has nothing to do with. It should be resolved from client side.
Could it be done with config for Remote-Desktop client(1.2.2691.0).

Or is there a way to say Windows how the Authentication to AADDS(Screenshot) should look like?

 

Customer is Cloud-Only and clients are managed via Microsoft Endpoint Manager.

 

Thanks for Reply

  • Tombofix's avatar
    Tombofix
    Copper Contributor
    We've been working with Microsoft Fast Track on enabling Windows Hello for Business using the Cloud Hybrid Trust. They advised that WHfB will not work with AVD / VDI solutions and that users should be using username and password. Right now, there isn't a way to change this as default!
  • tommykneetz's avatar
    tommykneetz
    Iron Contributor
    this should happen only once... after you choose user and password to login this should be the default. next time you dont have to switch...
  • Hi,
    Maybe it's because of Windows Hello for Business.

    One way to disable Windows Hello for Business is by using a group policy.

    Computer Configuration or User Configuration -> Administrative Templates -> Windows Components -> Windows Hello for Business

    Here for Use Windows Hello for Business select Disabled.

    Regards, Tom
    • itsbrad's avatar
      itsbrad
      Iron Contributor
      We use Windows Hello for Business so we don't want to disable it.
      • _CyberSamurai_'s avatar
        _CyberSamurai_
        Copper Contributor
        same here.... It would be enough to find a solution that login with credentials will be default.
    • itsbrad's avatar
      itsbrad
      Iron Contributor
      I am wondering the exact same it is confusing for users.

Resources