Virtual desktop hostpool deployment failed. User is not authorized to query the management service

Occasional Visitor

Deployment is failing on the final step.  

dscextension Microsoft.Compute/virtualMachines/extensions Conflict


{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see for usage details.","details":[{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource operation completed with terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"VMExtensionProvisioningError\",\r\n \"message\": \"VM has reported a failure when processing extension 'dscextension'. Error message: \\\"DSC Configuration 'FirstSessionHost' completed with error(s). Following are the first few: PowerShell DSC resource MSFT_ScriptResource failed to execute Set-TargetResource functionality with error message: User is not authorized to query the management service.\\nActivityId: f51a6c00-4459-4606-8d96-85a9816ea2f7\\nPowershell commands to diagnose the failure:\\nGet-RdsDiagnosticActivities -ActivityId f51a6c00-4459-4606-8d96-85a9816ea2f7\\n The SendConfigurationApply function did not succeed.\\\".\"\r\n }\r\n ]\r\n }\r\n}"}]}


Thank you,

1 Reply

@Jorge-F : We've seen numerous reportings of this, so we've updated the guides as of the beginning of May. The recommended steps have you create a service principal, test the login, then go through the Azure Marketplace flow. Can you try with the updated steps? You can find these at .