Error - Requested session access is denied

Megha Goushal 25 Reputation points
2023-07-05T15:30:52.96+00:00

I'm having trouble logging into my virtual machine using an authorized local user account with all the necessary permissions. I keep receiving the error message "The requested session access is denied". However, I am able to log in successfully when using a local admin or domain admin account. I have added the local user to the Remote Desktop Users Group. Why am I unable to log in as a local user with the required permissions on the virtual machine?

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,336 questions
Access
Access
A family of Microsoft relational database management systems designed for ease of use.
317 questions
Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,320 questions
{count} votes

Accepted answer
  1. vipullag-MSFT 25,211 Reputation points
    2023-07-06T06:17:40.6266667+00:00

    Hello Megha Goushal

    Welcome to Microsoft Q&A Platform, thanks for posting your query here.

    If you have already assigned the necessary roles to the local user account and are still unable to log in, you may want to check if the AADLoginForWindows extension is installed on the VM.

    If you have verified that the extension is installed and the roles are assigned correctly, you may want to check if the security policy "Network security: Allow PKU2U authentication requests to this computer to use online identities" is enabled on both the server and the client.

    Another possible reason is that the "Deny log on locally" policy is applied to the local user accounts. This policy can restrict users from logging in locally or remotely. Verify the local security policy settings on the virtual machine and ensure that the user account you're trying to log in with is not included in any "Deny log on locally" policy.

    Group Policy settings may be preventing non-administrative users from logging in remotely. Ensure that there are no restrictive policies applied to the virtual machine's local user accounts or the Remote Desktop Users Group.

    Additionally, you may want to check if the local user account is allowed to log in remotely.

    Hope these troubleshooting steps will help in resolving your issue.

    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Con Finucane 10 Reputation points
    2023-12-21T14:26:48.5733333+00:00

    The issue is the RDP session is trying to take over the admin session. Edit the rdp in notepad. do you see this entry

    administrative session:i:1

    If so start a fresh instance of remote desktop client and use that to start the session

    2 people found this answer helpful.