Windows Client for Spring 2020 update - Using the May update of the client

%3CLINGO-SUB%20id%3D%22lingo-sub-1421800%22%20slang%3D%22en-US%22%3EWindows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1421800%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20those%20of%20you%20validating%20the%20Spring%202020%20update%2C%20we%20have%20released%20the%20May%20update%20(version%201.2.1026)%20of%20the%20Windows%20client%20(MSRDC)%20which%20now%20provides%20the%20ability%20to%20subscribe%20to%20a%20Workspace%20using%20a%20URL%2C%20similar%20to%20the%20other%20remote%20desktop%20clients.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20subscribe%20to%20Spring%20update%20resources%2C%20select%20Subscribe%20with%20URL%20from%20the%20main%20page%20and%20provide%20the%20following%20URL%3A%20%3CA%20href%3D%22https%3A%2F%2Frdweb.wvd.microsoft.com%2Fapi%2Farm%2Ffeeddiscovery%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Frdweb.wvd.microsoft.com%2Fapi%2Farm%2Ffeeddiscovery%3C%2FA%3E.%20It%20is%20also%20recommended%20that%20you%20setup%20email%20discovery%20which%20can%20help%20users%20find%20the%20URL%20by%20entering%20their%20email%20address.%20Using%20this%20method%20removes%20the%20need%20to%20first%20consent%20to%20the%20Fall%202019%20client%20and%20server%20apps.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUsing%20this%20version%2C%20selecting%20Subscribe%20from%20the%20main%20page%20of%20the%20client%20will%20still%20fail%20during%20AAD%20authentication%20if%20you%20have%20not%20provided%20consent%20for%20Fall%202019.%20This%20is%20an%20issue%20we%20plan%20to%20address%20in%20the%20June%20release%20of%20the%20client%20by%20updating%20the%20way%20we%20do%20automatic%20discovery%20of%20a%20users%20resources%20from%20their%20work%20or%20school%20account.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1428755%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1428755%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F602201%22%20target%3D%22_blank%22%3E%40chhabrag%3C%2FA%3E%26nbsp%3BCheck%20out%20the%20comment%20on%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F53475%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F53475%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22%3CSPAN%3E%26nbsp%3BGot%20information%20that%20WVD%20team%20is%20working%20on%20document%20for%20business%20continuity%20and%20disaster%20recovery%20best%20practices%20for%20WVD.%20The%20document%20will%20be%20published%20soon%20(tentative%20timelines%20are%203%20weeks%20from%20now).%22%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1422718%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1422718%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F217952%22%20target%3D%22_blank%22%3E%40David%20Belanger%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20update%2C%20can%20you%20please%20help%20what%20is%20the%20solution%2Fprocess%20to%20achieve%20the%20regional%20DR%20for%20WVD%20services.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1468713%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1468713%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F217952%22%20target%3D%22_blank%22%3E%40David%20Belanger%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20version%20seems%20to%20have%20the%20same%20issue%20I%20have%20seen%20in%20all%20other%20versions%20I%20have%20tried%20in%20which%20once%20conditional%20access%20time%20expires%20the%20user%20gets%20the%20popup%20to%20authenticate%20again.%20If%20they%20choose%20their%20account%20in%20the%20list%20it%20loops%20over%20and%20over%20but%20never%20lets%20them%20enter%20any%20credentials.%20%3CSPAN%3EIn%20logs%20I%20can%20see%20%22Sign-in%20error%20code%3A%2070044%22%20and%20a%20Failure%20Reason%20of%20%22The%20session%20has%20expired%20or%20is%20invalid%20due%20to%20sign-in%20frequency%20checks%20by%20conditional%20access.%22%20Yet%20if%20the%20user%20just%20clicks%26nbsp%3B%22Use%20another%20account%22%26nbsp%3Bthen%20they%20can%20login%20fine.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1481615%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1481615%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F663686%22%20target%3D%22_blank%22%3E%40William_Kurrelmeyer%3C%2FA%3E%26nbsp%3BThank%20you%20for%20reporting%20this%20issue.%20The%20AAD%20team%20is%20investigating%20this%20issue%20which%20looks%20to%20be%20server%20side.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505483%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505483%22%20slang%3D%22en-US%22%3EThis%20issue%20still%20exists.%20I%20don't%20see%20this%20as%20an%20issue%20listed%20anywhere%20to%20track%20when%20it%20might%20be%20fixed.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1507356%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Client%20for%20Spring%202020%20update%20-%20Using%20the%20May%20update%20of%20the%20client%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1507356%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F217952%22%20target%3D%22_blank%22%3E%40David%20Belanger%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20the%20AAD%20team%20have%20an%20update%20on%20this%20issue%20for%20the%20WVD%20remote%20desktop%20client%3F%3CBR%20%2F%3E%3CBR%20%2F%3EConditional%20Access%20session%20controls%20for%20%22Sign-in%20frequency%22%20only%20support%20the%20following%20apps%3B%3C%2FP%3E%3CUL%3E%3CLI%3EWord%2C%20Excel%2C%20PowerPoint%20Online%3C%2FLI%3E%3CLI%3EOneNote%20Online%3C%2FLI%3E%3CLI%3EOffice.com%3C%2FLI%3E%3CLI%3EO365%20Admin%20portal%3C%2FLI%3E%3CLI%3EExchange%20Online%3C%2FLI%3E%3CLI%3ESharePoint%20and%20OneDrive%3C%2FLI%3E%3CLI%3ETeams%20web%20client%3C%2FLI%3E%3CLI%3EDynamics%20CRM%20Online%3C%2FLI%3E%3CLI%3EAzure%20portal%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-session%23sign-in-frequency%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-session%23sign-in-frequency%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20may%20need%20to%20turn%20off%20this%20setting%20for%20Windows%20Virtual%20Desktop%20until%20the%20client%20is%20supported.%3C%2FP%3E%3CH2%20id%3D%22toc-hId--1328694282%22%20id%3D%22toc-hId--1328694282%22%3E%26nbsp%3B%3C%2FH2%3E%3C%2FLINGO-BODY%3E
Highlighted
Microsoft

For those of you validating the Spring 2020 update, we have released the May update (version 1.2.1026) of the Windows client (MSRDC) which now provides the ability to subscribe to a Workspace using a URL, similar to the other remote desktop clients.

 

To subscribe to Spring update resources, select Subscribe with URL from the main page and provide the following URL: https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery. It is also recommended that you setup email discovery which can help users find the URL by entering their email address. Using this method removes the need to first consent to the Fall 2019 client and server apps.

 

Using this version, selecting Subscribe from the main page of the client will still fail during AAD authentication if you have not provided consent for Fall 2019. This is an issue we plan to address in the June release of the client by updating the way we do automatic discovery of a users resources from their work or school account.

6 Replies
Highlighted

@David Belanger Thanks for the update, can you please help what is the solution/process to achieve the regional DR for WVD services. 

Highlighted

@chhabrag Check out the comment on https://github.com/MicrosoftDocs/azure-docs/issues/53475 

 

" Got information that WVD team is working on document for business continuity and disaster recovery best practices for WVD. The document will be published soon (tentative timelines are 3 weeks from now)."

Highlighted

@David Belanger 

This version seems to have the same issue I have seen in all other versions I have tried in which once conditional access time expires the user gets the popup to authenticate again. If they choose their account in the list it loops over and over but never lets them enter any credentials. In logs I can see "Sign-in error code: 70044" and a Failure Reason of "The session has expired or is invalid due to sign-in frequency checks by conditional access." Yet if the user just clicks "Use another account" then they can login fine.

Highlighted

@WilliamK1 Thank you for reporting this issue. The AAD team is investigating this issue which looks to be server side.

Highlighted
This issue still exists. I don't see this as an issue listed anywhere to track when it might be fixed.
Highlighted

@David Belanger 

 

Does the AAD team have an update on this issue for the WVD remote desktop client?

Conditional Access session controls for "Sign-in frequency" only support the following apps;

  • Word, Excel, PowerPoint Online
  • OneNote Online
  • Office.com
  • O365 Admin portal
  • Exchange Online
  • SharePoint and OneDrive
  • Teams web client
  • Dynamics CRM Online
  • Azure portal

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-acces...

 

We may need to turn off this setting for Windows Virtual Desktop until the client is supported.