This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 13%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAB%3C/text%3E%3C/svg%3E)
I am trying to build KQL query to get information e.g. from WVDConnections table from desktop virtualization host pool. Is it possible to get info and distinguish mobile client devices (e.g. tablets and mobile phones) which are connecting to published apps? Within WVDConnections table there is column ClientType and it shows com.microsoft.rdc.html - in this type category corelated with Android devices?
I found info about apple devices: com.microsoft.rdc.ios: This refers to the Remote Desktop client for iOS devices, allowing connections from iPhones and iPads
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 32%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hi ADM Bartlomiej Belko
Welcome to Microsoft Q&A Forum, thank you for posting your query here!
Yes, we can identify mobile client devices connecting to published apps using the WVD Connections table in Azure Log Analytics by checking the Client Type column.
For IOS:
Let’s Identify AVD Connections coming from iOS devices. You can use the following KQL query to identify the users who are using iOS/iPadOS devices to connect to AVD.
This query helps to understand the basic information that iOS/iPadOS collects from the iOS/iPadOS platform. This also helps the Client OS version and a lot of other information,
Please adjust the below script as per requirement.
iOS RD Client Version -> 5170
iOS Client Type -> com.microsoft.rdc.ios
WVDConnections | where ClientOS contains "iOS" and ClientType == "com.microsoft.rdc.ios"
For Android:
1.This client type can be used on various platforms, including Android devices, via a web browser.
2.It is not exclusive to Android and can apply to other platforms as well.
3.For native Android connections, the Microsoft Remote Desktop client for Android (available on the Google Play Store) is typically used.
4.The com.microsoft.rdc.html client type indicates a connection via the web client, not the native Android app.
5.If you see com.microsoft.rdc.html in your logs, it may be from an Android device, but it could also be from other platforms with a web browser.
6.For more accurately identify Android connections, additional logging mechanisms or other indicators may be needed.
Android Devices (Native App): Typically uses the Microsoft Remote Desktop client for Android, but connections via the web client might show as com.microsoft.rdc.html
Additional Tips:
If you can filter the ConnectionType column to focus on specific connections like RemoteApp or Desktop. Additionally, you may want to include the GatewayRegion in your query to see where the connections are coming from.
WVDConnections
| where ClientType in ("com.microsoft.rdc.ios", "com.microsoft.rdc.html")
and ConnectionType == "RAIL" // For RemoteApp connections
| summarize count() by ClientType, GatewayRegion
WVDConnections
| where ClientType in ("com.microsoft.rdc.ios", "com.microsoft.rdc.html")
| summarize ConnectionCount = count() by ClientType, DeviceName
Refer Microsoft document for Additional Information: https://learn.microsoft.com/en-us/azure/virtual-desktop/diagnostics-log-analytics#example-queries.
let us know if you have any further queries. I’m happy to assist you further.
If the answer is helpful, please and "Upvote it".
Was this answer generated by copilot anyhow?
I am most interested in: 6.For more accurately identify Android connections, additional logging mechanisms or other indicators may be needed.
What other indicators we can use?
@ADM Bartlomiej Belko let me see if this is possible. I'm not terribly familiar with WVDConnections, but by chance, can you join the WVDConnetionNetowrkData table?
let user = "alias@domain";
WVDConnectionNetworkData
| join kind=leftouter (
WVDConnections
| distinct CorrelationId, UserName
) on CorrelationId
| where UserName == user
Filter down to a user using Android for any differentiators.
Thanks, but it does not shows anything relevant
@ADM Bartlomiej Belko so just confirm, you are trying to distinguish based on ClientOS, if the device is a tablet or mobile phone?
No worries @ADM Bartlomiej Belko. There is a ClientOS column in WVDConnections table. That should indicate the endpoint OS.
Also, have a look at Use cases for Azure Virtual Desktop Insights - Azure Virtual Desktop | Microsoft Learn. You may be able to use default AVD Insights.
It is visible in ClientOS column but also in ClientType