Now when I try to Remote Desktop into a vm that is on a domain, it will not let me connect because of a security error. This used to connect just fine. The only way to get around this is to manually log in. Once a user has logged into the computer, I can then remote into it like normal. Every time the vm is restarted though, I once again have to manually login to get remote access.   The error I receive: We couldn't connect to the remote PC because of a security error. If this keeps happening, contact your network administrator for assistance. Error code: 0x1807   ... View more

Hi,   It would be great if my YubiKey's FIDO2, U2F, OTP, OpenPGP 3 functionality could work inside an RDP session, specifically from macOS. ... View more

Supporting external identities would improve the 'users outside your organization' use case Azure Virtual Desktop architecture recommendations - Azure | Microsoft Learn   Users outside the organization will already have their own identity, either in their own AAD (Entra) tenant or with another provider.   Azure Virtual Desktop should support external identities because: as an application developer, managing their identity is not something that adds unique value; as the end user, I don't want to remember another password. ... View more

Hi,   At this moment B2B isn't supported for Azure Virtual Desktop: The user must be sourced from the same Active Directory that's connected to Azure AD. Azure Virtual Desktop does not support B2B or MSA accounts. The UPN you use to subscribe to Azure Virtual Desktop must exist in the Active Directory domain the VM is joined to.   It would be nice to create a B2B feature, so our end users can use AVD resources from our third party suppliers (DaaS/SaaS suppliers). This way will increase the user experience.   I think B2B is the future, it's already present in other Azure resources like Teams, Office 365, OneDrive, Sharepoint etc.   Discuss this already with Pedro Magrico. ... View more

Enable single sign-on using Azure AD without the need for Active Directory Federation Services. ... View more

Enable cac reader redirection on iOS to access AVD systems that require cac authentication.   ... View more

Allow Intune policy based management of the session host to allow for policy based settingsmanagement ... View more

Support Azure AD joined VMs and authentication. ... View more

Please provide an option to use Face ID to unlock RD Client app an iOS (or Authenticator app alternatively) for security (and convenience) reasons if stored account password are used. ... View more

Integrate the AVD Client with Microsoft Cloud App Security (MCAS) to allow for session based access controls, removing the security/RDP settings away from the host pool resource. This will make security controls a lot better and ease the administration effort massively around company owned and BYOD device controls. Cut/Paste, Print etc. ... View more

Provide the ability to enforce Multi-factor authentication (MFA) for every connection instead of just once per hour. ... View more

Our end users are using AVD resources of our third party suppliers (SaaS).   Currently it not possible to disable drive redirection on cliënt side by either changing the RDP(W) file, by policy or by GUI.    From security perspective it's not desirable to redirect local drives to AVD resources.    Please make it possible to disabling drive redirection by group policy (which the user's can't overruled) and by GUI on the client side itself. ... View more

As per Microsoft documentation All windows 10 multisession images comes with Fslogix pre-installed. The problem here is the images comes with old Fslogix version not the updated one. Like current installed version that comes with image is : 2.9.7838.44263 There is was an security issue reported with cloud cache. As new version that should come pre-installed is : 2.9.7979.62170 ... View more

Case: Especially for CAD/CAE use cases collaboration is a key element. A simple function to enable session mirroring and the possibility for end users to invite another user in their session would be beneficial.    There are options for admins how to mirror a session. But from an end user perspective a button "Invite some" -> "Get a Session Link" -> "Another user can use the link to join the session" would be great. ... View more

Allow copying data from user's endpoint (laptop, PC) to WVD Block copying data from user's endpoint (laptop, PC) to WVD Allow copying data from WVD to user's endpoint (laptop, PC) Block copying data from WVD to user's endpoint (laptop, PC) ... View more

By default (in the absence of a CA-signed server certificate), RDP connections between Windows PCs rely on a trust-on-first-use (TOFU) model, where the client software displays a warning [1] before sending credentials to an untrusted server whose certificate hash is not pinned to the registry [2]. The Remote Desktop client for iOS used to work like the Windows client in this respect [3], but at some point in the last few years, it stopped checking server certificates altogether. This is a security risk, because Windows credentials could be intercepted by a man-in-the-middle. Is this behaviour actually intended? If it is, I would strongly suggest adding a setting to manually re-enable certificate validation for environments with higher security requirements. (In my testing, neither reinstalling the app nor using a FQDN to connect had any effect.) [1] https://i.sstatic.net/pu5YX.png [2] HKCU\SOFTWARE\Microsoft\Terminal Server Client\Servers\...\CertHash [3] https://nextpointhost.com/images/knowledgebase/how_to_access_forex_vps_via_rdc_using_iphone_or_ipad_6.PNG ... View more

Microsoft Remote Desktop App currently has no way to login to a PC using a Microsoft Account with passwordless option set.   Note: while this seems to be “Azure” forum, this is where the Microsoft Remote Desktop app sends you when pressing the in-app “Report Feedback” link. ... View more

With saved credentials it would be really good to be able to enable Face ID to open the app ... View more

Many corporates do not with to turn off "Network Level Authentication" as it is a recommended feature to turn on .... on this basis, is there a way to make the macos remote desktop client work happily with "Network Level Authentication" feature, when it is turned on ????   This might be easier than trying to negotiate with big corporates to turn it off ( and leave it off ). ... View more