Setting the file. One moment.
Chapter 15 · Azure Diagnostics
Subchapter 15.32
troubleshooting/compute/references/rdp-service-config.mdMarkdown3 KBView on GitHub
VM is reachable but the RDP service itself is broken or misconfigured.
| Symptom | Solution | Documentation |
|---|---|---|
| TermService not running | Start the service and set to Automatic | Reset RDP service (opens in a new tab) |
| RDP port changed from 3389 | Reset port or update NSG to allow the custom port | Detailed RDP troubleshooting (opens in a new tab) |
| RDP disabled (fDenyTSConnections = 1) | Reset RDP config via CLI or Portal | Reset RDP service (opens in a new tab) |
| TLS/SSL certificate expired or corrupt | Delete cert and restart TermService to regenerate | RDP internal error (opens in a new tab) |
| NLA/Security Layer mismatch | Temporarily disable NLA for recovery | RDP general error (opens in a new tab) |
| GPO overriding local RDP settings | Check HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services | Detailed RDP troubleshooting (opens in a new tab) |
| RDS licensing expired | Remove RDSH role or configure license server | Specific RDP errors (opens in a new tab) |
⚠️ Warning: Commands marked with ⚡ use the VM agent/extensions. Run Pre-Flight Safety Checks before using them.
# ⚡ Reset all RDP configuration to defaults
az vm user reset-remote-desktop --name <vm-name> -g <resource-group>
# ⚡ Check TermService status via Run Command
az vm run-command invoke --name <vm-name> -g <resource-group> \
--command-id RunPowerShellScript --scripts "Get-Service TermService | Select-Object Status, StartType"
# Restart VM (if RDP service is unrecoverable — requires user approval)
az vm restart --name <vm-name> -g <resource-group>
# Redeploy VM (moves to new host — last resort, requires user approval)
az vm redeploy --name <vm-name> -g <resource-group>