Forum Discussion
MicrosoftSpring Update 2020 is in Public Preview!
Works great excepting any attempt at administration; I am the Global Administrator for the domain in Azure Active Directory.
When accessed through https://rdweb.wvd.microsoft.com/arm/webclient/index.html; UAC does not accept username@domain.com + Password.
When accessed through RDP; "The connection was denied because the user account is not authorized for remote login".
If unable to elevate privilege via WVD and also unable to set for remote login over RDP; how does one administer the WVD VMs?
Thank you in advance for your time and attention.
I don´t think that this is a WVD issue.
Did you check your Desktop application group to see if your user / security group is added successfully?
On the other hand, are there any kind of hardening GPOs enabled which prevent the access via RDP?
Thanks!
Patrick
So appreciate the response.
Agreed. WVD is working perfectly and I can go to my desktop at will using my Global Administrator username in the form of jd@domain.com plus the password.
The issue arises AFTER I am ON the WVD desktop where, for instance, I can run [Windows PowerShell].
However, when I run [Windows PowerShell (Admin)], UAC comes up and I can not find any combination of username and password that works.
So I guess the proper question is; "what form of my username and password should I use in WVD for UAC?"
Hopefully that makes sense.
As for direct RDP; when I am on the WVD desktop I can see that the "Enable Remote Desktop" is set to On. I can not change that of course because it also says in red letters, "Sign in as administrator to change this setting". Point being you may be right about a GPO. Apologies as I do not know how to check.
So either resolution would be helpful; either get through UAC in WVD or externally access via RDP.
Thank you in advance for your time and attention.
JD
WVD is GPO and domain level access. So if you have an Enterprise or Domain Admin account. You can open your powershell as administrator with that account.
Thank you for responding, this sounds promising. Unfortunately I am not versed in how to implement the changes you speak of.
What I do know is that I started the PaaS Azure Active Directory Domain Services (AADDS) and it seems to be working perfectly with WVD; and that I am the Global Administrator for mydomain.com.
Hopefully this means that I have the "Domain Account" you referenced; May I trouble you for what to do next? Do I go somewhere in the Azure portal to set something in GPO?
Would I then be able to open PowerShell on the WVD desktop when logged in as administrator?
Anxious to learn 😉
JD
