I recently set up a new Azure Virtual Desktop (AVD) instance using a Windows 11 Enterprise multi-session image, where I plan to deploy a single RemoteApp. Despite not using FSLogix and having enabled Entra authentication and CredSSP in the RDP settings, the first logon for any user takes an absurdly long time—over 5 minutes. I've made sure to disable Intune policies related to OneDrive and other non-essential features, but the issue continues.
In the event logs, I found numerous CloudAP errors (0xC00485D3) and HTTP 400 responses from msonline. There are also indications of interactive MFA present when I ran dsregcmd /status using the SYSTEM account. I've already turned off MFA for the 'Azure Windows VM Sign-In' resource and excluded affected users, including my own test account, yet the problem persists.
The CPU usage spikes momentarily at logon but returns to normal levels very quickly, and RAM usage hovers around 20%. I'm at a loss for what could be causing this delay and would greatly appreciate any insights. I can't possibly roll this out to users with performance like this.
2 Answers
Are you using a clean image for your setup? If you're using a new VNet, do you have a NAT Gateway configured? Here are some steps you can take to troubleshoot logon delays:
- **Check Event Viewer logs**: Look into Group Policy and User Profile Service logs to see if there's a noticeable delay in processing times.
- **Use GPResult reports**: Run `gpresult /h report.html` to spot any slow GPOs that might be affecting logon speed.
- **Investigate user profiles**: Corrupted roaming profiles can really slow things down, so check the logs there too.
- **Network considerations**: If the slowness appears only on certain networks, check DNS settings or AD configurations. Testing login offline vs online could also help.
What type of VM are you using? Are you by chance on a credit-based VM like a B-series, and have you run out of credits? That could affect performance.
I'm using a D4as v6 on a regular subscription.
Yes, I'm using the official Microsoft Windows 11 Enterprise multi-session 25H2 image. It's fresh and has a NAT gateway set up. By the way, I don't use Active Directory, so there's no GPO interfering. I also removed one custom scheduled task I had, but I’m still facing the same delay.