Setting the file. One moment.
Chapter 15 · Azure Diagnostics
Subchapter 15.31
troubleshooting/compute/references/rdp-connectivity.mdMarkdown3 KBView on GitHub
Use for Windows VM RDP timeouts, refused connections, black screen, or RDP error dialogs.
| Symptom | Action | Docs |
|---|---|---|
| timeout/no response | Check power state, public IP, NSG allow for 3389 | RDP NSG (opens in a new tab) |
| timeout with NSG OK | Check guest firewall | Guest firewall (opens in a new tab) |
| credentials failed | Reset password or username format | RDP errors (opens in a new tab) |
| internal/security/authentication error | Check TLS, NLA, CredSSP, certificate, clock skew | Internal (opens in a new tab) / General (opens in a new tab) |
| black screen after login | Check Explorer, GPU driver, GPO, session state | Detailed (opens in a new tab) |
| license server unavailable | Fix or remove RDS licensing role | RDP errors (opens in a new tab) |
| cannot find computer | Check public IP, DNS, and VM allocation | RDP errors (opens in a new tab) |
| connects then disconnects | Check session limits, idle timeout, resources | RDP overview (opens in a new tab) |
| works from some IPs | Check NSG source restriction | RDP NSG (opens in a new tab) |
| Event IDs in logs | Match event ID to documented cause | Event IDs (opens in a new tab) |
| guest NIC disabled | Enable NIC via safe command path | RDP NIC (opens in a new tab) |
Commands marked by reset/update use VM agent/extensions. Run Pre-Flight Safety Checks first.
az vm get-instance-view --name <vm> -g <rg> --query "instanceView.statuses" -o table
az network nsg rule list --nsg-name <nsg> -g <rg> -o table
az network watcher test-ip-flow --direction Inbound --protocol TCP \
--local <vm-private-ip>:3389 --remote <your-public-ip>:* --vm <vm> -g <rg>
az vm user reset-remote-desktop --name <vm> -g <rg>
az vm user update --name <vm> -g <rg> -u <user> -p '<new-password>'