Home

Azure VDI - Windows Virtual Desktop - Provision a host pool

%3CLINGO-SUB%20id%3D%22lingo-sub-391180%22%20slang%3D%22en-US%22%3EAzure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-391180%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%C2%B4m%20trying%20to%20deploy%20the%20new%20VDI%20in%20Azure%20-%20when%20i%20create%20the%20%22Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%22%20i%20got%20the%20following%20error%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOPERATION%20ID%20B19D3469A530441B%20TRACKING%20ID%20f128aaf1-a3ff-4538-b479-cfddcc07a082%20STATUS%20Conflict%20STATUS%20MESSAGE%20%7B%20%22status%22%3A%20%22Failed%22%2C%20%22error%22%3A%20%7B%20%22code%22%3A%20%22ResourceDeploymentFailure%22%2C%20%22message%22%3A%20%22The%20resource%20operation%20completed%20with%20terminal%20provisioning%20state%20'Failed'.%22%2C%20%22details%22%3A%20%5B%20%7B%20%22code%22%3A%20%22VMExtensionProvisioningError%22%2C%20%22message%22%3A%20%22VM%20has%20reported%20a%20failure%20when%20processing%20extension%20'dscextension'.%20Error%20message%3A%20%5C%22DSC%20Configuration%20'FirstSessionHost'%20completed%20with%20error(s).%20Following%20are%20the%20first%20few%3A%20PowerShell%20DSC%20resource%20MSFT_ScriptResource%20failed%20to%20execute%20Set-TargetResource%20functionality%20with%20error%20message%3A%20User%20is%20not%20authorized%20to%20query%20the%20management%20service.%5CnActivityId%3A%20cc06c8e9-24a8-4852-ab04-f4696f9b5994%5CnPowershell%20commands%20to%20diagnose%20the%20failure%3A%5CnGet-RdsDiagnosticActivities%20-ActivityId%20cc06c8e9-24a8-4852-ab04-f4696f9b5994%5Cn%20The%20SendConfigurationApply%20function%20did%20not%20succeed.%5C%22.%22%20%7D%20%5D%20%7D%20%7D%20PROVISIONING%20STATE%20Failed%20TIMESTAMP%2029.3.2019%2019.55.23%20DURATION%209%20minutes%2032%20seconds%20TYPE%20Microsoft.Compute%2FvirtualMachines%2Fextensions%20RESOURCE%20ID%20%2Fsubscriptions%2Fcf2720dc-a5c0-4eec-b844-0da2b09cf084%2FresourceGroups%2FVDI%2Fproviders%2FMicrosoft.Compute%2FvirtualMachines%2Fwin10vdi-0-0%2Fextensions%2Fdscextension%20RESOURCE%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3EOPERATION%20ID%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3EB19D3469A530441B%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ETRACKING%20ID%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3Ef128aaf1-a3ff-4538-b479-cfddcc07a082%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ESTATUS%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3EConflict%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ESTATUS%20MESSAGE%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%20class%3D%22x_x_ext-hubs-deploymentoperation-textoverflow%20x_x_ext-hubs-deploymentoperation-prewrap%22%3E%7B%20%22status%22%3A%20%22Failed%22%2C%20%22error%22%3A%20%7B%20%22code%22%3A%20%22ResourceDeploymentFailure%22%2C%20%22message%22%3A%20%22The%20resource%20operation%20completed%20with%20terminal%20provisioning%20state%20'Failed'.%22%2C%20%22details%22%3A%20%5B%20%7B%20%22code%22%3A%20%22VMExtensionProvisioningError%22%2C%20%22message%22%3A%20%22VM%20has%20reported%20a%20failure%20when%20processing%20extension%20'dscextension'.%20Error%20message%3A%20%5C%22DSC%20Configuration%20'FirstSessionHost'%20completed%20with%20error(s).%20Following%20are%20the%20first%20few%3A%20PowerShell%20DSC%20resource%20MSFT_ScriptResource%20failed%20to%20execute%20Set-TargetResource%20functionality%20with%20error%20message%3A%20User%20is%20not%20authorized%20to%20query%20the%20management%20service.%5CnActivityId%3A%20cc06c8e9-24a8-4852-ab04-f4696f9b5994%5CnPowershell%20commands%20to%20diagnose%20the%20failure%3A%5CnGet-RdsDiagnosticActivities%20-ActivityId%20cc06c8e9-24a8-4852-ab04-f4696f9b5994%5Cn%20The%20SendConfigurationApply%20function%20did%20not%20succeed.%5C%22.%22%20%7D%20%5D%20%7D%20%7D%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3EPROVISIONING%20STATE%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3EFailed%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ETIMESTAMP%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3E29.3.2019%2019.55.23%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3EDURATION%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3E9%20minutes%2032%20seconds%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ETYPE%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3EMicrosoft.Compute%2FvirtualMachines%2Fextensions%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ERESOURCE%20ID%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3E%2Fsubscriptions%2Fcf2720dc-a5c0-4eec-b844-0da2b09cf084%2FresourceGroups%2FVDI%2Fproviders%2FMicrosoft.Compute%2FvirtualMachines%2Fwin10vdi-0-0%2Fextensions%2Fdscextension%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3CLI%3E%3CDIV%3E%3CLABEL%20class%3D%22%26quot%3Bext-hubs-deploymentoperation-label%26quot%3B%22%20data-bind%3D%22%26quot%3Btext%3A%22%20label%3D%22%22%3ERESOURCE%3C%2FLABEL%3E%3C%2FDIV%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%26nbsp%3B%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CDIV%3E%3CDIV%3Ewin10vdi-0-0%2Fdscextension%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E------------------------------%3C%2FDIV%3E%3CDIV%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%3E%3CP%3EI%20can%20see%20that%20the%20win10%20mashine%20is%20member%20of%20the%20domain%20-%20but%20cant%20find%20anything%20about%20this%20error.%3C%2FP%3E%3CP%3ECan%20someone%20help%20me%20with%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2FLars%3C%2FP%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-391180%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Elars%40thobiasen.dk%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-392146%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-392146%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F95328%22%20target%3D%22_blank%22%3E%40Tim%20Settar%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%2C%20but%20i%20get%20the%20followint%20error%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-RdsHostPool%20%3A%20User%20is%20not%20authorized%20to%20query%20the%20management%20service.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E--------------------------%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENew-RdsHostPool%20%3A%20User%20is%20not%20authorized%20to%20query%20the%20management%20service.%3C%2FP%3E%3CP%3EActivityId%3A%20a594a76f-3729-40b3-bdd3-bf956949c996%3C%2FP%3E%3CP%3EPowershell%20commands%20to%20diagnose%20the%20failure%3A%3C%2FP%3E%3CP%3EGet-RdsDiagnosticActivities%20-ActivityId%20a594a76f-3729-40b3-bdd3-bf956949c996%3C%2FP%3E%3CP%3EAt%20line%3A1%20char%3A1%3C%2FP%3E%3CP%3E%2B%20New-RdsHostPool%20%60%3C%2FP%3E%3CP%3E%2B%20~~~~~~~~~~~~~~~~~%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%2B%20CategoryInfo%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3A%20FromStdErr%3A%20(Microsoft.RDInf....NewRdsHostPool%3ANewRdsHostPool)%20%5BNew-RdsHostPool%5D%2C%20RdsPow%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%20erShellException%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%2B%20FullyQualifiedErrorId%20%3A%20UnauthorizedAccess%2CMicrosoft.RDInfra.RDPowershell.HostPool.NewRdsHostPool%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E--------------------------------------------%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20someone%20the%20solution%20for%20this%20error%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-391922%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-391922%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310822%22%20target%3D%22_blank%22%3E%40Thobiasen%3C%2FA%3EDid%20you%20start%20here%3F%3C%2FP%3E%3CP%3E%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Ftenant-setup-azure-active-directory%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fvirtual-desktop%2Ftenant-setup-azure-active-directory%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-429558%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-429558%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310822%22%20target%3D%22_blank%22%3E%40Thobiasen%3C%2FA%3E%26nbsp%3BHi%2C%20do%20you%20have%20any%20solution%20for%20this%20problem%3A%20%3CSPAN%3EVM%20has%20reported%20a%20failure%20when%20processing%20extension%20'dscextension'%20%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EThank%20you%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3ECristian%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482803%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482803%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310822%22%20target%3D%22_blank%22%20rel%3D%22noopener%22%3E%40Thobiasen%3C%2FA%3E%26nbsp%3BGuys%20im%20also%20getting%20same%20error%2C%20%22%3CEM%3E%3CU%3EUser%20is%20not%20authorized%20to%20query%20the%20management%20service%3C%2FU%3E%3C%2FEM%3E%22%20were%20you%20able%20to%20fix%20it%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-482852%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-482852%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F327485%22%20target%3D%22_blank%22%3E%40nippyin%3C%2FA%3E%26nbsp%3BFor%20me%20it%20worked%20when%20I%20used%20the%20same%20user%20(wvd.admin%40)%20everywhere%20%3A%20WVD%20tenant%20creation%2C%20VM%20host%20user%2C%20joining%20the%20VM%20host%20to%20domain.%20It%20must%20be%20Global%20administrator%20AAD%2C%20Virtual%20Desktop%20TenantCreator.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-485383%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-485383%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3BSomehow%20it%20worked%20for%20me%20too%2C%20I%20deleted%20the%20existing%20resource%20group%20and%20started%20from%20scratch.%20Thanks%20for%20your%20input%20though!%3C%2FP%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F327485%22%20target%3D%22_blank%22%3E%40nippyin%3C%2FA%3E%26nbsp%3BFor%20me%20it%20worked%20when%20I%20used%20the%20same%20user%20(wvd.admin%40)%20everywhere%20%3A%20WVD%20tenant%20creation%2C%20VM%20host%20user%2C%20joining%20the%20VM%20host%20to%20domain.%20It%20must%20be%20Global%20administrator%20AAD%2C%20Virtual%20Desktop%20TenantCreator.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F327485%22%20target%3D%22_blank%22%3E%40nippyin%3C%2FA%3E%26nbsp%3BFor%20me%20it%20worked%20when%20I%20used%20the%20same%20user%20(wvd.admin%40)%20everywhere%20%3A%20WVD%20tenant%20creation%2C%20VM%20host%20user%2C%20joining%20the%20VM%20host%20to%20domain.%20It%20must%20be%20Global%20administrator%20AAD%2C%20Virtual%20Desktop%20TenantCreator.%3C%2FP%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-660633%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-660633%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20your%20domain%20controller%20synced%20up%20to%20Azure%20AD%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-660711%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-660711%22%20slang%3D%22en-US%22%3ENo%2C%20is%20only%20Azure%20AD.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-726710%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-726710%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20you%20used%20wvd%40admin%20are%20you%20talking%20about%20using%20the%20administrator%40domain.com%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F327485%22%20target%3D%22_blank%22%3E%40nippyin%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-726715%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-726715%22%20slang%3D%22en-US%22%3E%3CP%3EIm%20trying%20to%20figure%20out%20what%20you%20guys%20used%20to%20get%20past%20this%20..%20thanks%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F327485%22%20target%3D%22_blank%22%3E%40nippyin%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728071%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728071%22%20slang%3D%22en-US%22%3EYes%2C%20I%20used%20an%20user%20that%20is%20Azure%20global%20administrator%20(with%20no%20MFA).%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728346%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728346%22%20slang%3D%22en-US%22%3E%3CP%3EI%20used%20a%20user%20with%20no%20MFA%20and%20a%20Global%20Administrator%20and%20a%20owner%20on%20the%20subscription%20with%20Tenant%20Creator%20and%20a%20local%20user%20and%20I%20still%20get%20the%20error%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728435%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728435%22%20slang%3D%22en-US%22%3EWhat%20error%20exactly%3F%20when%20processing%20extension%20'dscextension'%20%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728455%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728455%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20I%20actually%20went%20through%20the%20process%20of%20creating%20a%20service%20principal%20and%20it%20is%20still%20failing%20on%20me%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728464%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728464%22%20slang%3D%22en-US%22%3EThis%20option%20(with%20the%20service%20principal)%20didn't%20worked%20for%20me%20too.%20You%20must%20choose%2Fenter%20your%20%22super%20user%22%20credentials%20everywhere.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728467%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728467%22%20slang%3D%22en-US%22%3E%3CP%3EWeird%20thing%20is%20the%20user%20i%20am%20using%20is%20a%20Global%20Admin%2C%20Tenant%20Owner%2C%20and%20Subscription%20owner%20and%20still%20fails%20at%20that%20spot%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728516%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728516%22%20slang%3D%22en-US%22%3EUse%20the%20same%20UPN%20for%20the%20tenant%20RDS%20Owner%20(see%20the%20attached%20image)%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728525%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728525%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20been%20doing%20that%20also%20fully%20created%20tenant%20and%20all%20in%20powershell%20per%20recommendation%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-728569%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-728569%22%20slang%3D%22en-US%22%3ESorry%2C%20that's%20all%20I%20have%20done%20%3A(%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-729270%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20VDI%20-%20Windows%20Virtual%20Desktop%20-%20Provision%20a%20host%20pool%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-729270%22%20slang%3D%22en-US%22%3E%3CP%3EFinally%20got%20this%20to%20work%20and%20the%20browser%20does%20work%20to%20add%20other%20users%20to%20be%20able%20to%20connect%20through%20the%20browser%20is%20it%20just%20the%20rdsgroupuser%20keep%20adding%20folks%3F%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318625%22%20target%3D%22_blank%22%3E%40cristiansefciuc%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Thobiasen
New Contributor

Hi, I´m trying to deploy the new VDI in Azure - when i create the "Windows Virtual Desktop - Provision a host pool" i got the following error:

 

 

OPERATION ID B19D3469A530441B TRACKING ID f128aaf1-a3ff-4538-b479-cfddcc07a082 STATUS Conflict STATUS MESSAGE { "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "VMExtensionProvisioningError", "message": "VM has reported a failure when processing extension 'dscextension'. Error message: \"DSC Configuration 'FirstSessionHost' completed with error(s). Following are the first few: PowerShell DSC resource MSFT_ScriptResource failed to execute Set-TargetResource functionality with error message: User is not authorized to query the management service.\nActivityId: cc06c8e9-24a8-4852-ab04-f4696f9b5994\nPowershell commands to diagnose the failure:\nGet-RdsDiagnosticActivities -ActivityId cc06c8e9-24a8-4852-ab04-f4696f9b5994\n The SendConfigurationApply function did not succeed.\"." } ] } } PROVISIONING STATE Failed TIMESTAMP 29.3.2019 19.55.23 DURATION 9 minutes 32 seconds TYPE Microsoft.Compute/virtualMachines/extensions RESOURCE ID /subscriptions/cf2720dc-a5c0-4eec-b844-0da2b09cf084/resourceGroups/VDI/providers/Microsoft.Compute/virtualMachines/win10vdi-0-0/extensions/dscextension RESOURCE

 

 

  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">OPERATION ID</label>
       
    B19D3469A530441B
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">TRACKING ID</label>
       
    f128aaf1-a3ff-4538-b479-cfddcc07a082
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">STATUS</label>
       
    Conflict
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">STATUS MESSAGE</label>
       
    { "status": "Failed", "error": { "code": "ResourceDeploymentFailure", "message": "The resource operation completed with terminal provisioning state 'Failed'.", "details": [ { "code": "VMExtensionProvisioningError", "message": "VM has reported a failure when processing extension 'dscextension'. Error message: \"DSC Configuration 'FirstSessionHost' completed with error(s). Following are the first few: PowerShell DSC resource MSFT_ScriptResource failed to execute Set-TargetResource functionality with error message: User is not authorized to query the management service.\nActivityId: cc06c8e9-24a8-4852-ab04-f4696f9b5994\nPowershell commands to diagnose the failure:\nGet-RdsDiagnosticActivities -ActivityId cc06c8e9-24a8-4852-ab04-f4696f9b5994\n The SendConfigurationApply function did not succeed.\"." } ] } }
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">PROVISIONING STATE</label>
       
    Failed
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">TIMESTAMP</label>
       
    29.3.2019 19.55.23
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">DURATION</label>
       
    9 minutes 32 seconds
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">TYPE</label>
       
    Microsoft.Compute/virtualMachines/extensions
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">RESOURCE ID</label>
       
    /subscriptions/cf2720dc-a5c0-4eec-b844-0da2b09cf084/resourceGroups/VDI/providers/Microsoft.Compute/virtualMachines/win10vdi-0-0/extensions/dscextension
  • <label class="ext-hubs-deploymentoperation-label" data-bind="text: label" style="font-weight:inherit;text-transform:uppercase;max-width:100%;width:auto;text-display:inline-block;">RESOURCE</label>
       
    win10vdi-0-0/dscextension
     
    ------------------------------
     

    I can see that the win10 mashine is member of the domain - but cant find anything about this error.

    Can someone help me with this?

     

    /Lars

20 Replies
Highlighted

@Tim Settar 

Hi.

 

Yes, but i get the followint error:

 

New-RdsHostPool : User is not authorized to query the management service.

 

--------------------------

 

New-RdsHostPool : User is not authorized to query the management service.

ActivityId: a594a76f-3729-40b3-bdd3-bf956949c996

Powershell commands to diagnose the failure:

Get-RdsDiagnosticActivities -ActivityId a594a76f-3729-40b3-bdd3-bf956949c996

At line:1 char:1

+ New-RdsHostPool `

+ ~~~~~~~~~~~~~~~~~

    + CategoryInfo          : FromStdErr: (Microsoft.RDInf....NewRdsHostPool:NewRdsHostPool) [New-RdsHostPool], RdsPow

   erShellException

    + FullyQualifiedErrorId : UnauthorizedAccess,Microsoft.RDInfra.RDPowershell.HostPool.NewRdsHostPool

 

--------------------------------------------

 

Have someone the solution for this error?

Highlighted

@Thobiasen Hi, do you have any solution for this problem: VM has reported a failure when processing extension 'dscextension' ?

Thank you,

Cristian

Highlighted

@Thobiasen Guys im also getting same error, "User is not authorized to query the management service" were you able to fix it?

Highlighted

@nippyin For me it worked when I used the same user (wvd.admin@) everywhere : WVD tenant creation, VM host user, joining the VM host to domain. It must be Global administrator AAD, Virtual Desktop TenantCreator.

Highlighted

@cristiansefciuc Somehow it worked for me too, I deleted the existing resource group and started from scratch. Thanks for your input though!


@cristiansefciuc wrote:

@nippyin For me it worked when I used the same user (wvd.admin@) everywhere : WVD tenant creation, VM host user, joining the VM host to domain. It must be Global administrator AAD, Virtual Desktop TenantCreator.



@cristiansefciuc wrote:

@nippyin For me it worked when I used the same user (wvd.admin@) everywhere : WVD tenant creation, VM host user, joining the VM host to domain. It must be Global administrator AAD, Virtual Desktop TenantCreator.




 

Highlighted

@cristiansefciuc 

Is your domain controller synced up to Azure AD?

Highlighted
No, is only Azure AD.
Highlighted

So you used wvd@admin are you talking about using the administrator@domain.com @nippyin 

Highlighted

Im trying to figure out what you guys used to get past this .. thanks@nippyin 

Highlighted
Yes, I used an user that is Azure global administrator (with no MFA).
Highlighted

I used a user with no MFA and a Global Administrator and a owner on the subscription with Tenant Creator and a local user and I still get the error @cristiansefciuc 

Highlighted
What error exactly? when processing extension 'dscextension' ?
Highlighted

Yes I actually went through the process of creating a service principal and it is still failing on me@cristiansefciuc 

Highlighted
This option (with the service principal) didn't worked for me too. You must choose/enter your "super user" credentials everywhere.
Highlighted

Weird thing is the user i am using is a Global Admin, Tenant Owner, and Subscription owner and still fails at that spot @cristiansefciuc 

Highlighted
Use the same UPN for the tenant RDS Owner (see the attached image)
Highlighted

I have been doing that also fully created tenant and all in powershell per recommendation

@cristiansefciuc 

Highlighted
Sorry, that's all I have done :(
Highlighted

Finally got this to work and the browser does work to add other users to be able to connect through the browser is it just the rdsgroupuser keep adding folks? @cristiansefciuc