So we use Nerdio to facilitate AVD. For whatever reason whenever hosts are removed and deleted by design (auto-scale logic) users who were previously on the deleted/removed host are greeted with a 135011 error stating the device was disabled and they can't get into any Office product on their current AVD session. Only once we delete the disabled object in AD and sync does the issue go away. Its an easy fix, but having to get into AD to clean up a host or 2 every time we update the gold image or hosts get removed on the weekends due to lack of need this happens. I get why its happening, but what I don't understand is why the user is clearly on an active machine, authenticating, MFAing and then getting that error.
What is even odder is when I look at their sign-in from Azure AD it shows a MFA requirement is failed, error 50201.
