Restoring Remote Desktop (RDP) connectivity to Azure VM after a user lock out

This article applies to the following products:

Sometimes, accidental changes by users to rules of the above apps affect RDP connectivity and prevent VM access resulting in user lock outs. The following are the steps to restore RDP connectivity to VMs in Azure.

1. Connect to a VM via Serial Console

Refer to Azure Serial Console for Windows for details.

  • Within the Azure, navigate via menu to Virtual Machines -> name-of-the-VM -> Connect -> Connect.
  • On the right side, expand More ways to connect.
  • Then, click on Go to serial console.
    Connect to the VM via Serial Console

2. Start Powershell

Refer to Use CMD or PowerShell in Serial Console for details.

  • Create a channel with CMD instance with the command:
    cmd.exe
  • Activate the channel with CMD instance with the command:
    ch -si 1
  • On the updated screen, enter the user credentials.
    Serial Console enter credentials
  • Start Powershell with the command:
    Powershell.exe

3. Unbind (disable) "Verigio Filter" from a network adapter

  • Get the list of network adapters by entering:
    Get-NetAdapter
    Disable Verigio Filter traffic filtering on the network adapter
    Notice the name Ethernet for the interface Microsoft Hyper-V Network Adapter.
  • The component ID of the Verigio Filter driver is always ms_verigio. To unbind Verigio Filter from the adapter Ethernet, enter the command:
    Set-NetAdapterBinding -Name "Ethernet" -ComponentID ms_verigio -Enabled $False Disable Verigio Filter traffic filtering on the network adapter

After performing all of the above, the Verigio Filter driver is no longer filtering network traffic for the network adapter Ethernet. Thus, Remote Desktop connectivity is back to normal.

4. Connect to VM via Remote Desktop (RDP) and fix any needed fixing app rules

Most apps that use Verigio Filter do not track its bindings to network adapters. When Verigio Filter is unbound (disabled) from an adapter, those apps still operate as usuall and allow changes to their rules and settings. However, those updated rules do not affect the actual network traffic.

5. Bind (enable) "Verigio Filter" to a network adapter

  • To enable Verigio Filter driver for the adapter Ethernet, enter the command:
    Set-NetAdapterBinding -Name "Ethernet" -ComponentID ms_verigio -Enabled $True


Last updated: Aug 12, 2024.