Consistent RDP Connection to VMs

Question

Consistent RDP Connection to VMs

John 0

I'm unable to figure out how to have a Windows VM be permanently accessible. They are being either automatically shut down, deallocated, or in some cases still running but RDP loses the ability to connect. The issues don't get resolved unless I log back into Azure and either restart it or re-initiate RDP with JIT connect running its checks, or sometimes waiting an hour and then the connection works again. How do I configure one to simply stay on and remain accessible via RDP reliably?

0 comments

1 answer

Your answer

Answer 1

Jilakara Hemalatha 11,600 Microsoft External Staff Moderator

Hello John,

Thank you for reaching out regarding your Azure Virtual Machine (VM) stopping, deallocating, or experiencing intermittent reboots. Based on your description, there are several reasons why a VM may stop or become inaccessible and understanding these will help ensure continuous availability.

Auto-Shutdown Feature:

Azure provides an Auto-shutdown feature designed to save costs by automatically shutting down VMs during periods of inactivity. If this is enabled on your VM, it will be deallocated according to the configured schedule, rendering it temporarily inaccessible via RDP.

To verify and disable this feature: navigate to your VM in the Azure portal → Operations → Auto-shutdown and turn it off if required.

Reference: Auto-shutdown a virtual machine

Spot VM Behavior:

If your VM is deployed as a Spot VM, it can be deallocated at any time based on capacity availability in the selected region or if the market price exceeds your maximum set price. Spot VMs are ideal for cost-sensitive, non-critical workloads but are not guaranteed to remain running. You can mitigate this by resizing the VM to a standard size or creating a new VM from existing disk snapshots.

Reference: Azure Spot Virtual Machines

Subscription, Quota, and Billing Considerations:

VMs may also stop or deallocate if your subscription credit expires or if there is a billing issue. Verify your subscription status in the Azure portal under Cost Management + Billing. Additionally, ensure that your resource usage has not exceeded subscription quotas by checking Subscriptions → Usage + Quotas

Reference: Azure subscription and service limits, quotas, and constraints

Planned and Unplanned Maintenance:

Azure periodically performs maintenance for performance, security, and reliability improvements. This includes both planned maintenance, which is communicated via Service Health, and unplanned maintenance, which can trigger automatic VM reboots or migrations

Reference: Understand a system reboot for Azure VM

Automation, Configuration Changes, and Updates:

Other common causes of VM reboots include automated scripts, configuration changes (e.g., resizing, changing static IP, or admin passwords), and Windows Updates triggered by Azure Security Center. It is recommended to review any automation tasks to ensure they are not causing unintended shutdowns or restarts.

Reference: automate the shutdown of your VMs

VMs with attached VHDs - If your VM has a large number of attached VHDs it's possible to exceed the scalability targets for your storage account which would cause a reboot. Read more about the guidelines for VMs with attached VHDs .

If the physical server hosting the VM experiences faults or becomes unresponsive, the Azure Host Agent may reboot the VM. Typically, the VM is back online within a few minutes. If a host cannot be rebooted, Azure performs auto-recovery, migrating the VM to a healthy host, usually completing within 15 minutes.

Also please refer below documentation to troubleshoot disconnects frequently in Azure VM

https://dotnet.territoriali.olinfo.it/en-us/troubleshoot/azure/virtual-machines/windows/troubleshoot-rdp-intermittent-connectivity

Hope this helps! Please let me know if you have any queries in comments.

Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-01T16:57:57.8966667+00:00

Hello John,

Just checking if above provided information was helpful! Please let me know if you have any queries in comments.
John 0 Reputation points

2026-04-01T17:16:45.9233333+00:00

Thank you. I was able to narrow down the problem to being caused by the Just in Time (JIT) access timing out. In order for the VM to be accessible I need to log into Azure and re-enable JIT by clicking "Request JIT + Check access" every few hours. I have not yet figured out how to resolve this so it stays active. Any ideas?
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-01T19:56:28.38+00:00
Hi John,

Thank you for your update — you’re absolutely right in identifying that the behavior is related to Just-in-Time (JIT) access timing out.

JIT is designed to enhance security by temporarily allowing RDP access (port 3389) for a specified duration and then automatically closing it. This is why you need to re-enable access periodically — this is expected behavior.

How to increase the JIT access duration

You can extend the allowed access time by updating the JIT configuration:

Sign in to the Azure Portal

Navigate to your Virtual Machine

From the left-hand menu, select Microsoft Defender for Cloud

Click on Just-in-time VM access

Select your VM and click Configure

Under the port configuration (RDP – 3389), update the Maximum request time

You can increase this up to the allowed limit (typically up to 24 hours)

Click Save

After this, when you request JIT access, you’ll be able to select a longer duration, and RDP will remain available for that time.

Reference: https://dotnet.territoriali.olinfo.it/en-us/azure/defender-for-cloud/enable-just-in-time-access
John 0 Reputation points

2026-04-01T20:31:54.0566667+00:00

Thank you, but how can a configuration be made so this doesn't have to be done? So that the machine is always available as per my original question. Can it be done on this platform?
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-01T20:50:16.25+00:00
Yes — it is absolutely possible to have your VM always accessible on Azure without needing to repeatedly enable access.

However, this cannot be achieved while using Just-in-Time (JIT), as JIT is designed to always expire access after a set duration.

To make the VM always accessible:

Disable JIT access for the VM

Allow RDP (port 3389) directly via the Network Security Group (NSG), preferably restricted to your public IP

Once configured, RDP will remain available continuously without any manual steps.

You can also use Azure Bastion, which provides persistent access without exposing RDP publicly.

Reference: https://dotnet.territoriali.olinfo.it/en-us/azure/defender-for-cloud/enable-just-in-time-access

https://dotnet.territoriali.olinfo.it/en-us/azure/virtual-network/network-security-groups-overview

https://dotnet.territoriali.olinfo.it/en-us/azure/bastion/bastion-overview
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-03T01:04:42.83+00:00

Hello John,

Just checking if above provided information was helpful! Please let me know if you have any queries in comments.
John 0 Reputation points

2026-04-03T02:13:43.9733333+00:00

I've not yet been able to figure out how to disable JIT. The instructions you provided were about enabling it not disabling it, and asking ai directed me to this page (screenshot below) but when I click on Microsoft Defender there's no option to actually disable it. The defender link takes me to the request JIT access page but there is no disable option there. If you know where the disable option is please send a screenshot of the page and i'll check it out in Azure. I appreciate your help!
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-06T10:29:54.0433333+00:00

In Azure portal search for Microsoft Defender for cloud >> In left search for Workload Protections → Just-in-time VM access. Select your VM → click Remove JIT → Confirm
John 0 Reputation points

2026-04-06T14:46:03.5166667+00:00

That worked! Thank you :)
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-07T00:49:05.26+00:00

Thanks for update John.
Jilakara Hemalatha 11,600 Reputation points Microsoft External Staff Moderator

2026-04-08T06:30:22.1633333+00:00

John., As issue is resolved. Could you please accept the answer and upvote it. Thanks

Share via

Consistent RDP Connection to VMs

1 answer

Your answer