When I run this command i get
(Get-RdsDiagnosticActivities -TenantName CBP-Software -username blah.blah@yakidysmackidy.ca -detailed).Errors

ErrorSource : RAIL
ErrorOperation : RAILLaunchWin32App
ErrorCode : 2
ErrorCodeSymbolic :
ErrorMessage : ≤diagnosticCode=RdpInitShellExecuteFailure;filename=C:\users\default\desktop\CBP.lnk;directory=C:\u
sers\default\desktop\;params=;isDocument=0;connectionStage=RdpInitAppExecution≥
ErrorInternal : False
ReportedBy : RDStack
Time : 9/22/2020 1:12:30 PM

I have deployed WVD and it has been successful without any error.

But, I trying to RDP by WebClient gettting the below error.

We couldn’t connect to the gateway because of an error. If this keeps happening, ask your admin.

Please can you assist me to give any solution.

Also trying `$Credential = Get-Credential & Add-RdsAccount -DeploymentUrl “https://rdbroker.wvd.microsoft.com” -AadTenantId “” -Credential $Credential` and this prompts me for ServicePrincipal object which i don’t know how to create or if it has to be associated with any specific aad app registration and client secret setup.

I’m also curios why the azure wvd hostpool template wizard doesn’t ask for necessary details and set this all up for us versus a) expecting it to already be provisioned and b) expect us to know how to provision this obscure wvd hostpool setup dependency.

Hi Erjen I am using AAD DS and tested with domain join function with Iaas VM and even while deploying the WVD domin joining stage get successfully completed. I am following your steps now and while creating hostpool through PS getting same error which I got while deploying from portal.
PS C:\Users\136424> New-RdsHostPool -TenantName $TenantGroupName -Name $hostpoolname
New-RdsHostPool : User is not authorized to query the management service.
ActivityId: 5ab89bb2-fdbd-4dab-b729-c2219e0b0b77
Powershell commands to diagnose the failure:
Get-RdsDiagnosticActivities -ActivityId 5ab89bb2-fdbd-4dab-b729-c2219e0b0b77
At line:1 char:1
+ New-RdsHostPool -TenantName $TenantGroupName -Name $hostpoolname
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : FromStdErr: (Microsoft.RDInf….NewRdsHostPool:NewRdsHostPool) [New-RdsHostPool], RdsPowerShellException
+ FullyQualifiedErrorId : UnauthorizedAccess,Microsoft.RDInfra.RDPowershell.HostPool.NewRdsHostPoo

I created the Service Principal and still, i cant get the WVD working any idea what i could try more?

Thank a lot for the great article!

Can I ask you few questions about Azure WVD, please?

Is there a way to deploy WVD VMs and all related resources (avialbility set, network card, disks) with specific tags?

Is there a (easy) way to manage WVD hostpool? What if I want to increase number of VMs, add new users, check who is login and etc? Is there any GUI management console?

Thank you

Thank you for the nice write up; I enjoyed it.

Is there any way to allow a service principal to have Tenant Creator rights? The commander certainly has an option to use an SP to authenticate. I’d appreciate any help!

Get-RdsTenant : User is not authorized to query the management service.
ActivityId: 68c4bb22-4d53-4df2-a214-be5d3fad17fa
Powershell commands to diagnose the failure:
Get-RdsDiagnosticActivities -ActivityId 68c4bb22-4d53-4df2-a214-be5d3fad17fa
At line:1 char:1

https://docs.microsoft.com/en-us/azure/virtual-desktop/manage-resources-using-ui#guidance-for-template-parameters
https://github.com/Azure/RDS-Templates/tree/master/wvd-templates/wvd-management-ux/deploy

raw error:
“code”: “DeploymentFailed”,
“message”: “At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.”,
“details”: [
{
“code”: “Conflict”,
“message”: “{\r\n \”status\”: \”Failed\”,\r\n \”error\”: {\r\n \”code\”: \”ResourceDeploymentFailure\”,\r\n \”message\”: \”The resource operation completed with terminal provisioning state ‘Failed’.\”\r\n }\r\n}”

I had noticed that there two WVD applications under the wvd user and removed one, but still failing.

Thank you for the excellent explanation. I’ve tried to implement this several times, but I am stuck at a point where all I get, no matter if I try to use a UPN or a Service Principal, is an error stating that the users is not authorized to query the management service.

“DSC Configuration ‘FirstSessionHost’ completed with error(s). Following are the first few: PowerShell DSC resource MSFT_ScriptResource failed to execute Set-TargetResource functionality with error message: User is not authorized to query the management service.

Do you have any suggestions on what could be wroing?

Thank you in advance for your help.