SOLVED

Adding New WVD RemoteApp has issues with the ts allow list

%3CLINGO-SUB%20id%3D%22lingo-sub-1137703%22%20slang%3D%22en-US%22%3EAdding%20New%20WVD%20RemoteApp%20has%20issues%20with%20the%20ts%20allow%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1137703%22%20slang%3D%22en-US%22%3E%3CP%3EI've%20been%20running%20WVD%20Multi-session%20using%20RemoteApp%20groups%2Fapps%20for%20about%20a%20month%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EInitially%20when%20I%20used%20the%20powershell%20commandlets%20for%20New-RdsRemoteApp%20I%20had%20no%20issues%2C%20but%20recently%20I've%20been%20having%20to%20manually%20add%20in%20the%20registry%20keys%20for%20the%20TSAppAllowList.%26nbsp%3B%20Suffice%20to%20say%20this%20makes%20things%20quite%20laborious.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20setting%20the%20fdisabledallowlist%20and%20haven't%20had%20any%20luck.%26nbsp%3B%20I'm%20a%20single%20host%20in%20a%20pool%20using%20service%20principal%20creds%2C%20I%20have%20a%20mix%20of%20apps%20that%20are%20created%20via%20app%20%22aliases%22%20and%20some%20that%20are%20created%20manually.%26nbsp%3B%20New%20apps%20of%20both%20types%20now%20will%20show%20up%20in%20the%20RDC%20client%20and%20start%20menu%2C%20but%20when%20launching%20will%20show%20the%20classic%20error%20related%20to%20TSAppAllowList%20registry%20keys%20missing%20and%20is%20resolved%20by%20me%20manually%20creating%20the%20keys.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1137944%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20New%20WVD%20RemoteApp%20has%20issues%20with%20the%20ts%20allow%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1137944%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F305776%22%20target%3D%22_blank%22%3E%40christianmontoya%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20the%20reply%20Christian!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20to%20clarify%2C%20when%20you%20say%20new%20connection%20are%20you%20referring%20to%20log%20off%2Fon%20the%20host%20or%20subscribe%2Funsubscribe%20within%20the%20RDC%20app%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20definitely%20try%20it%20out.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENot%20sure%20if%20you%20saw%20my%20other%20post%20regarding%20recent%20files%2Fjump%20lists%20%2B%20remote%20apps%2C%20but%20if%20you%20had%20a%20moment%20to%20review%20that%20I%20would%20also%20be%20very%20grateful%20(%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fwindows-virtual-desktop%2Fwvd-remote-app-recent-files-not-populated%2Fm-p%2F1133773%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fwindows-virtual-desktop%2Fwvd-remote-app-recent-files-not-populated%2Fm-p%2F1133773%3C%2FA%3E).%26nbsp%3B%20I%20was%20going%20to%20engage%20premium%20support%20but%20I%20don't%20even%20see%20WVD%20listed%20in%20the%20ticket%20options%20for%20Azure.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1137882%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20New%20WVD%20RemoteApp%20has%20issues%20with%20the%20ts%20allow%20list%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1137882%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F536221%22%20target%3D%22_blank%22%3E%40mattplan8%3C%2FA%3E%26nbsp%3B%3A%20Thanks%20for%20posting.%20Typically%2C%20the%20app%20allow%20list%20for%20a%20user%20refreshes%20when%20you%20initiate%20a%20new%20connection%20(not%20re-connection).%20Are%20you%20able%20to%20test%20that%3F%20If%20this%20still%20doesn't%20work%2C%20then%20we%20have%20a%20larger%20issue%2C%20as%20you%20shouldn't%20have%20to%20manually%20add%20to%20the%20allow%20list%20yourself.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I've been running WVD Multi-session using RemoteApp groups/apps for about a month now.

 

Initially when I used the powershell commandlets for New-RdsRemoteApp I had no issues, but recently I've been having to manually add in the registry keys for the TSAppAllowList.  Suffice to say this makes things quite laborious.

 

I tried setting the fdisabledallowlist and haven't had any luck.  I'm a single host in a pool using service principal creds, I have a mix of apps that are created via app "aliases" and some that are created manually.  New apps of both types now will show up in the RDC client and start menu, but when launching will show the classic error related to TSAppAllowList registry keys missing and is resolved by me manually creating the keys. 

3 Replies
Highlighted
Solution

@mattplan8 : Thanks for posting. Typically, the app allow list for a user refreshes when you initiate a new connection (not re-connection). Are you able to test that? If this still doesn't work, then we have a larger issue, as you shouldn't have to manually add to the allow list yourself.

Highlighted

@christianmontoya 

 

Thanks for the reply Christian!

 

Just to clarify, when you say new connection are you referring to log off/on the host or subscribe/unsubscribe within the RDC app?

 

I can definitely try it out.

 

Not sure if you saw my other post regarding recent files/jump lists + remote apps, but if you had a moment to review that I would also be very grateful (https://techcommunity.microsoft.com/t5/windows-virtual-desktop/wvd-remote-app-recent-files-not-popul...).  I was going to engage premium support but I don't even see WVD listed in the ticket options for Azure.

 

 

Highlighted

@christianmontoya

 

Confirmed the next day 2 I had not manually fixed were working.

 

I didn't get a chance to test if it's a log off/on or a unsubscribe/subscribe, but one of those fixed it.  I'll post back when I have a bit more time to test specifically.