This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 28.999999999999996%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Hi,
We lock down external access to some users to AVD using Conditional Access policies, and currently use the app ID's below for AVD.
I tried connecting using Windows App and it fails, error code 53003 and App name- Windows 365 client. I added that client in but it still doesn't work.
How do I get Windows App to work with CA?
Thanks
9cdead84-a844-4324-93f2-b2e6bb768d07 AVD
fa4345a4-a730-4230-84a8-7d9651b86739 Client
0af06dc6-e4b5-4f28-818e-e78e62d137a5 Windows 365
Did you get a chance to review above response. If it helps, please accept the answer and upvote where it says "Was it helpful" Thanks!
@Jim Mottershead
We need to review the EntraID sign in logs. Do you block all apps and just want to allow specific ones?
I see you are missing the "Windows Cloud Login" App ID - 270efc09-cd0d-444b-a71f-39af4910ec45"
Please follow this document link for details
If I have answered your question, please accept this as answer as a token of appreciation.
I see you are missing the "Windows Cloud Login" App ID - 270efc09-cd0d-444b-a71f-39af4910ec45"
Please follow this document link for details
If I have answered your question, please accept this as answer as a token of appreciation.
Hi, I still can't login, I have this message now.
I have these allowed on my Conditional Access Policy. The older AVD clients work fine, just not Windows App,
Thanks
@Jim Mottershead I see, let me review this and get back.
Hi,
We block access to specific apps for specific groups of users. So this group, can only access the apps below.
I tested this morning and it worked with the above settings. I got an MFA prompt whereas last week, I had the error above.
One more note- last week, the error was due to the Windows 365 Client App being flagged in the error and there was no matching App ID to add in Conditional Access.
Today, with the above Apps allowed, it works. Does 'Windows 365' cover 'Windows 365 Client', even though the App ID's are different?
Hello Jim Mottershead
I am glad to know the issue has been resolved. Both apps should be configured together as the Azure Virtual Desktop clients will soon switch from using the Microsoft Remote Desktop app to the Windows Cloud Login app to authenticate to the session host.
Would you be so kind to accept this as an answer to help other community users with similar issues navigate to this solution. As an original poster only you have the option to accept answer on this thread.
Have a good day!