Remote Desktop authentication to AVD (AADDS) asks for PIN by default

Copper Contributor

Hi All,

at our customers, we noticed that the PIN is asked first if a user logon to AVD Session-Host. It`s the Authentication to AADDS.
As you can see in Screenshot. User try to logon via PIN which is for sure not working. The user has to choose "more options (green)" to choose "Other Account (red)"


I am searching for a possibility, that Username-Password authentication is default.


If i understand correctly, AADDS, AVD and the Session-Host((Windows 10 Enterprise for Virtual Desktops 20h1-evd)) has nothing to do with. It should be resolved from client side.
Could it be done with config for Remote-Desktop client(1.2.2691.0).

Or is there a way to say Windows how the Authentication to AADDS(Screenshot) should look like?


Customer is Cloud-Only and clients are managed via Microsoft Endpoint Manager.


Thanks for Reply

8 Replies
I am wondering the exact same it is confusing for users.
Maybe it's because of Windows Hello for Business.

One way to disable Windows Hello for Business is by using a group policy.

Computer Configuration or User Configuration -> Administrative Templates -> Windows Components -> Windows Hello for Business

Here for Use Windows Hello for Business select Disabled.

Regards, Tom
We use Windows Hello for Business so we don't want to disable it.
same here.... It would be enough to find a solution that login with credentials will be default.


that ist the problem if WHfB is in use.

You have to train your users to switch and login with username + password.

In my opion WHfB is not supported for AVD-logins.

this should happen only once... after you choose user and password to login this should be the default. next time you dont have to switch...
We've been working with Microsoft Fast Track on enabling Windows Hello for Business using the Cloud Hybrid Trust. They advised that WHfB will not work with AVD / VDI solutions and that users should be using username and password. Right now, there isn't a way to change this as default!