You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# An unattended desktop flow run fails with the MSEntraMachineAlwaysPromptingForPassword error
10
10
@@ -29,7 +29,29 @@ Your unattended desktop flow run fails with the "MSEntraMachineAlwaysPromptingFo
29
29
30
30
Power Automate for desktop can't validate your Microsoft Entra ID (formerly Azure Active Directory) credentials on the machine. This issue is typically caused by a group policy setting on your machine.
31
31
32
-
## Resolution
32
+
## Resolution 1: Use Microsoft Entra authentication for Remote Desktop with a user certificate
33
+
34
+
This resolution requires Power Automate for desktop version 2.50 or later and must be used when no [multifactor authentication (MFA) exception](~/power-platform/power-automate/administration/conditional-access-and-multi-factor-authentication-in-flow.md#details) can be granted to the desktop flow connection account.
35
+
36
+
For steps on how to set up Microsoft Entra certificate based authentication for Power Automate, see [Configure certificate-based authentication (preview)](/power-automate/desktop-flows/configure-certificate-based-auth).
37
+
38
+
## Resolution 2: Use Microsoft Entra authentication for Remote Desktop with a username and password
39
+
40
+
This resolution requires Power Automate for desktop version 2.49 or later. If you don't have MFA enabled for the account used by the desktop flows connection, you can set up Microsoft Entra authentication using a username and password instead.
41
+
42
+
1. Open the Registry Editor (regedit) with administrative privileges. Navigate to the following registry path, create a new DWORD-32 value with the name `UseRdsAadAuthentication`, and then set the value of `UseRdsAadAuthentication` to **1**.
2.[Hide the consent prompt dialog for a target device group](/power-automate/desktop-flows/run-unattended-desktop-flows#admin-consent-for-unattended-runs-using-cba-or-sign-in-credentials-with-nla-preview).
49
+
50
+
3. Restart the Power Automate service.
51
+
52
+
4. Use a Microsoft Entra ID connection with username and password credentials. Note that an MFA exception is required for this account.
53
+
54
+
## Resolution 3: Disable fPromptForPassword
33
55
34
56
To solve this issue, check the group policy setting on your machine.
Copy file name to clipboardExpand all lines: support/power-platform/power-automate/desktop-flows/troubleshoot-errors-running-attended-or-unattended-desktop-flows.md
+4-3Lines changed: 4 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,8 +1,8 @@
1
1
---
2
2
title: Error code occurs when running an attended or unattended desktop flow
3
3
description: Provides mitigation steps for the error codes that occur when running attended or unattended desktop flows.
|UnattendedUserSessionDisconnected|400|Unattended|For more information about this error code, see [UnattendedUserSessionDisconnected](troubleshoot-desktop-flow-run-queue-errors.md#unattendedusersessiondisconnected).|
29
29
|UnattendedUserSessionLocked|400|Unattended|For more information about this error code, see [UnattendedUserSessionLocked](troubleshoot-desktop-flow-run-queue-errors.md#unattendedusersessionlocked).|
30
30
|SessionNotFound|400|Unattended|The Windows session on the machine for the given run can't be found. This issue can occur in the following cases:<br>- The machine reboots during the run.<br>- You're using a virtual machine that was cloned after installing Power Automate. If it was cloned after the installation and was registered, delete your machine from the Power Automate portal and re-register the machine.|
31
+
|SessionNotFoundAfterCreation|400|Unattended|The Windows session on the machine for the given run can't be found after the session is created. This issue can occur if the Power Automate service ([UIFlowService](/power-automate/desktop-flows/troubleshoot#change-the-on-premises-service-account)) doesn't have the rights to enumerate remote sessions. To solve this issue, ensure the account running the Power Automate service (UIFlowService) is in the "Remote Desktop Users" group and not removed by group policy.|
31
32
|TooManyActiveSessions|400|Unattended|Windows Server only.</br>You need to sign out at least one active session on the machine.|
32
33
|SessionHasLoggedOff|400|Unattended|To solve this issue, see [SessionHasLoggedOff occurs during a desktop flow run connected with the cloud](session-has-logged-off-troubleshooting.md).|
33
34
|SessionHasLoggedOffWithMaxIdleTime |400|Unattended|To solve this issue, see [SessionHasLoggedOffWithMaxIdleTime occurs during a desktop flow run](desktop-flow-max-session-duration-error.md).|
|UnattendedUnsupportedWithOldConnection|403|Unattended|You need to create a new connection on the portal.|
38
39
|RDPIsNotEnabled|400|Unattended|You need to enable Remote Desktop on the machine.|
39
40
|UIFlowAlreadyRunning|429|Attended</br>Unattended|A desktop flow is already running on the machine. You need to wait for its completion. For more information about this error code, see [UIFlowAlreadyRunning](troubleshoot-desktop-flow-run-queue-errors.md#uiflowalreadyrunning).|
40
-
|AadLogonFailure|400|Unattended|You need to disable Network Level Authentication (NLA) on the machine if you want to use Microsoft Entra credentials.|
41
+
|MSEntraLogonFailure|400|Unattended|To resolve this issue, see [Desktop flows run failed with the MSEntraLogonFailure error code](ui-flows-run-failed-with-aadlogonfailure-error.md).|
41
42
|Win10AlreadyHasActiveSession|400|Unattended|Windows 10 only. You need to sign out from the active session on the machine.|
42
43
|UIFlowAgentNotAvailable|400|Attended</br>Unattended|You need to confirm that the service uiflowservice is up and running on your machine. If you have the following error when trying to start uiflowservice, see [Desktop flows failure](https://support.microsoft.com/help/4564550/):</br>**Windows could not start the UIFlowService service on Local Computer. Error 1069: The service did not start due to a logon failure**|
43
44
|UnableToCallCrlEndpoint|400|Attended</br>Unattended|You need to ensure the revocation list for the certificates can be checked. Ensure that the CRL services aren't blocked on the target machine. The services that must be contacted are listed in this article: [Limits for automated, scheduled, and instant flows](/power-automate/limits-and-config#ui-flows-required-services)|
Your unattended desktop flows run failed with the error code **AadLogonFailure**.
19
+
Your unattended desktop flows run failed with the error code **MSEntraLogonFailure**.
20
20
21
21
## Cause
22
22
23
23
Desktop flows failed to validate your Microsoft Entra credentials on the machine.
24
24
25
-
## Resolution
25
+
## Resolution for Power Automate for desktop version 2.49 or later
26
+
27
+
You need to [configure Microsoft Entra authentication for Remote Desktop](/power-automate/desktop-flows/run-unattended-desktop-flows#admin-consent-for-unattended-runs-using-cba-or-sign-in-credentials-with-nla-preview).
28
+
29
+
## Resolution for Power Automate for desktop version 2.48 or earlier
26
30
27
31
You need to disable Network Level Authentication (NLA) on the machine.
0 commit comments