Unable to connect to Azure from Powershell [Windows 10]

Open

#14,861 opened on Apr 29, 2021 8 comments 0 reactions 0 assignees View on GitHub

Authentication customer-reported MSAL question

Dominant language: C#
Stars: 4.8k
Forks: 4.3k
Avg merge: 2d 17h
Merged PRs (30d): 51

Description

## Description
Unable to connect to Azure from Powershell using Connect-AzAccount. Windows 10

## Steps to reproduce
Opening Powershell in Administrator Mode:
```
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

WARNING: INITIALIZATION: Token cache encryption is not supported in current environment and token cache will be fallen
back as plain text.
Loading personal and system profiles took 4157ms.
PS C:\WINDOWS\system32> connect-azaccount
WARNING: Unable to acquire token for tenant 'organizations'
WARNING: Please run 'Connect-AzAccount -DeviceCode' if browser is not supported in this session.
connect-azaccount : InteractiveBrowserCredential authentication failed: Persistence check failed. Inspect inner
exception for details
At line:1 char:1
+ connect-azaccount
+ ~~~~~~~~~~~~~~~~~
+ CategoryInfo : CloseError: (:) [Connect-AzAccount], AuthenticationFailedException
+ FullyQualifiedErrorId : Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand

```

## Environment data

```
PS C:\WINDOWS\system32> $psversiontable

Name Value
---- -----
PSVersion 5.1.17763.1490
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.17763.1490
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
```

## Module versions

```
PS C:\WINDOWS\system32> get-module

ModuleType Version Name ExportedCommands
---------- ------- ---- ----------------
Script 2.2.3 Az.Accounts {Add-AzEnvironment, Clear-AzContext, Clear-AzDefault, Conn...
Manifest 3.1.0.0 Microsoft.PowerShell.Management {Add-Computer, Add-Content, Checkpoint-Computer, Clear-Con...
Manifest 3.0.0.0 Microsoft.PowerShell.Security {ConvertFrom-SecureString, ConvertTo-SecureString, Get-Acl...
Manifest 3.1.0.0 Microsoft.PowerShell.Utility {Add-Member, Add-Type, Clear-Variable, Compare-Object...}
Manifest 3.0.0.0 Microsoft.WSMan.Management {Connect-WSMan, Disable-WSManCredSSP, Disconnect-WSMan, En...
Script 2.0.0 PSReadline {Get-PSReadLineKeyHandler, Get-PSReadLineOption, Remove-PS...

PS C:\WINDOWS\system32> get-module -listavailable

Directory: C:\Program Files\WindowsPowerShell\Modules

ModuleType Version Name
---------- -------
Script 2.2.3
Script 2.2.0
Script 1.8.1
Script 1.1.1
Script 2.0.1
Script 1.1.1
Script 1.1.4
Script 1.1.3
Script 2.2.0
Script 2.1.0
Script 2.0.1
Script 1.0.0
Script 1.1.0
Script 1.4.1
Script 1.4.0
Script 1.3.6
Script 3.1.0
Script 3.0.0
Script 2.0.0
Script 1.0.3
Script 1.6.0
Script 1.4.3
Script 1.8.0
Script 1.4.0
Script 4.8.0
Script 4.6.0
Script 4.1.0
Script 1.0.3
Script 2.1.0
Script 2.0.0
Script 1.1.1
Script 1.1.0
Script 1.0.2
Script 1.0.1
Script
Script
Script 1.8.1
Script 1.0.2
Script 1.3.0
Script 1.2.8
Script 1.0.0
Script 1.1.0
Script 2.1.1
Script 2.0.1
Script 1.0.0
Script 1.0.2
Script 1.1.2
Script 1.3.0
Script 1.2.3
Script 1.7.1
Script 1.4.3
Script 1.6.1
Script 1.5.0
Script 2.0.0
Script 1.0.0
Script 4.1.1
Script 4.1.0
Script 3.2.0
Script 1.2.0
Script 1.1.0
Script 1.0.2
Script 2.7.1
Script 2.7.0
Script 2.5.0
Script 3.3.0
Script 3.1.0
Script 2.0.0
Script 1.0.1
Script 1.0.0
Script 1.4.0
Script 1.3.2
Script 1.1.3
Script 1.1.0
Script 1.0.0
Script 0.7.3
Script 2.0.0
Script 1.0.2
Script 1.0.2
Script 1.1.1
Script 2.3.0
Script 2.2.0
Script 2.0.0
Script 4.4.0
Script 4.3.0
Script 3.0.0
Script 1.1.1
Script 2.3.0
Script 2.1.0
Script 1.4.0
Script 1.3.1
Script 1.1.2
Script 1.0.3
Script 3.2.0
Script 3.0.1
Script 2.9.1
Script 1.4.0
Script 1.2.1
Script 1.0.3
Script 3.1.1
Script 3.0.1
Script 2.1.0
Script 1.4.1
Script 2.2.2
Script 2.2.0
Script 2.1.0
Script 1.2.0
Script 1.1.1
Script
Script
Script 2.7.0
Script 1.1.0
Script 3.2.0
Script 3.0.0
Script 2.1.0
Script 1.4.0
Script 1.3.0
Script 1.2.3
Script 1.0.1
Script 1.0.0
Script 1.0.4
Script 2.1.1
Script 2.1.0
Script 1.9.0
Script
Script
Script 5.1.2
Binary
Script 1.2.1
Manifest
Script 1.0.1
Script
Script 1.4.7
Script 3.4.0
Script 2.2.5
Script 0.4.2
Script 2.0.0 ExportedCommands ---- ---------------- Az.Accounts {Disable-AzDataCollection, Disable-AzContextAutosave, Enab... Az.Accounts {Disable-AzDataCollection, Disable-AzContextAutosave, Enab... Az.Accounts {Disable-AzDataCollection, Disable-AzContextAutosave, Enab... Az.Advisor {Get-AzAdvisorRecommendation, Enable-AzAdvisorRecommendati... Az.Aks {Get-AzAksCluster, New-AzAksCluster, Remove-AzAksCluster, ... Az.Aks {Get-AzAks, New-AzAks, Remove-AzAks, Import-AzAksCredentia... Az.AnalysisServices {Resume-AzAnalysisServicesServer, Suspend-AzAnalysisServic... Az.AnalysisServices {Resume-AzAnalysisServicesServer, Suspend-AzAnalysisServic... Az.ApiManagement {Add-AzApiManagementApiToGateway, Add-AzApiManagementApiTo... Az.ApiManagement {Add-AzApiManagementApiToGateway, Add-AzApiManagementApiTo... Az.ApiManagement {Add-AzApiManagementApiToProduct, Add-AzApiManagementProdu... Az.AppConfiguration {Get-AzAppConfigurationStore, Get-AzAppConfigurationStoreK... Az.ApplicationInsights {Get-AzApplicationInsights, New-AzApplicationInsights, Rem... Az.Automation {Get-AzAutomationHybridWorkerGroup, Remove-AzAutomationHyb... Az.Automation {Get-AzAutomationHybridWorkerGroup, Remove-AzAutomationHyb... Az.Automation {Get-AzAutomationHybridWorkerGroup, Remove-AzAutomationHyb... Az.Batch {Remove-AzBatchAccount, Get-AzBatchAccount, Get-AzBatchAcc... Az.Batch {Remove-AzBatchAccount, Get-AzBatchAccount, Get-AzBatchAcc... Az.Billing {Get-AzBillingInvoice, Get-AzBillingPeriod, Get-AzEnrollme... Az.Billing {Get-AzBillingInvoice, Get-AzBillingPeriod, Get-AzEnrollme... Az.Cdn {Get-AzCdnProfile, Get-AzCdnProfileSsoUrl, New-AzCdnProfil... Az.Cdn {Get-AzCdnProfile, Get-AzCdnProfileSsoUrl, New-AzCdnProfil... Az.CognitiveServices {Get-AzCognitiveServicesAccount, Get-AzCognitiveServicesAc... Az.CognitiveServices {Get-AzCognitiveServicesAccount, Get-AzCognitiveServicesAc... Az.Compute {Remove-AzAvailabilitySet, Get-AzAvailabilitySet, New-AzAv... Az.Compute {Remove-AzAvailabilitySet, Get-AzAvailabilitySet, New-AzAv... Az.Compute {Remove-AzAvailabilitySet, Get-AzAvailabilitySet, New-AzAv... Az.ContainerInstance {New-AzContainerGroup, Get-AzContainerGroup, Remove-AzCont... Az.ContainerRegistry {New-AzContainerRegistry, Get-AzContainerRegistry, Update-... Az.ContainerRegistry {New-AzContainerRegistry, Get-AzContainerRegistry, Update-... Az.ContainerRegistry {New-AzContainerRegistry, Get-AzContainerRegistry, Update-... Az.DataBoxEdge {Get-AzDataBoxEdgeJob, Get-AzDataBoxEdgeDevice, Invoke-AzD... Az.Databricks {Get-AzDatabricksVNetPeering, Get-AzDatabricksWorkspace, N... Az.Databricks {Get-AzDatabricksVNetPeering, Get-AzDatabricksWorkspace, N... 1.11.3 Az.DataFactory {Set-AzDataFactoryV2, Update-AzDataFactoryV2, Get-AzDataFa... 1.11.1 Az.DataFactory {Set-AzDataFactoryV2, Update-AzDataFactoryV2, Get-AzDataFa... Az.DataFactory {Set-AzDataFactoryV2, Update-AzDataFactoryV2, Get-AzDataFa... Az.DataLakeAnalytics {Get-AzDataLakeAnalyticsDataSource, New-AzDataLakeAnalytic... Az.DataLakeStore {Get-AzDataLakeStoreTrustedIdProvider, Remove-AzDataLakeSt... Az.DataLakeStore {Get-AzDataLakeStoreTrustedIdProvider, Remove-AzDataLakeSt... Az.DataShare {New-AzDataShareAccount, Get-AzDataShareAccount, Remove-Az... Az.DeploymentManager {Get-AzDeploymentManagerArtifactSource, New-AzDeploymentMa... Az.DesktopVirtualization {Disconnect-AzWvdUserSession, Expand-AzWvdMsixImage, Get-A... Az.DesktopVirtualization {Disconnect-AzWvdUserSession, Expand-AzWvdMsixImage, Get-A... Az.DesktopVirtualization {Disconnect-AzWvdUserSession, Get-AzWvdApplication, Get-Az... Az.DevTestLabs {Get-AzDtlAllowedVMSizesPolicy, Get-AzDtlAutoShutdownPolic... Az.Dns {Get-AzDnsRecordSet, New-AzDnsRecordConfig, Remove-AzDnsRe... Az.EventGrid {New-AzEventGridTopic, Get-AzEventGridTopic, Set-AzEventGr... Az.EventGrid {New-AzEventGridTopic, Get-AzEventGridTopic, Set-AzEventGr... Az.EventHub {New-AzEventHubNamespace, Get-AzEventHubNamespace, Set-AzE... Az.EventHub {New-AzEventHubNamespace, Get-AzEventHubNamespace, Set-AzE... Az.FrontDoor {New-AzFrontDoor, Get-AzFrontDoor, Set-AzFrontDoor, Remove... Az.FrontDoor {New-AzFrontDoor, Get-AzFrontDoor, Set-AzFrontDoor, Remove... Az.Functions {Get-AzFunctionApp, Get-AzFunctionAppAvailableLocation, Ge... Az.Functions {Get-AzFunctionApp, Get-AzFunctionAppAvailableLocation, Ge... Az.HDInsight {Get-AzHDInsightJob, New-AzHDInsightSqoopJobDefinition, Wa... Az.HDInsight {Get-AzHDInsightJob, New-AzHDInsightSqoopJobDefinition, Wa... Az.HDInsight {Get-AzHDInsightJob, New-AzHDInsightSqoopJobDefinition, Wa... Az.HealthcareApis {New-AzHealthcareApisService, Remove-AzHealthcareApisServi... Az.HealthcareApis {New-AzHealthcareApisService, Remove-AzHealthcareApisServi... Az.HealthcareApis {New-AzHealthcareApisService, Remove-AzHealthcareApisServi... Az.IotHub {Add-AzIotHubKey, Get-AzIotHubEventHubConsumerGroup, Get-A... Az.IotHub {Add-AzIotHubKey, Get-AzIotHubEventHubConsumerGroup, Get-A... Az.IotHub {Add-AzIotHubKey, Get-AzIotHubEventHubConsumerGroup, Get-A... Az.KeyVault {Add-AzKeyVaultCertificate, Update-AzKeyVaultCertificate, ... Az.KeyVault {Add-AzManagedHsmKey, Get-AzManagedHsmKey, Remove-AzManage... Az.KeyVault {Add-AzKeyVaultCertificate, Update-AzKeyVaultCertificate, ... Az.Kusto {Add-AzKustoClusterLanguageExtension, Add-AzKustoDatabaseP... Az.Kusto {Add-AzKustoClusterLanguageExtension, Add-AzKustoDatabaseP... Az.LogicApp {Get-AzIntegrationAccountAgreement, Get-AzIntegrationAccou... Az.LogicApp {Get-AzIntegrationAccountAgreement, Get-AzIntegrationAccou... Az.MachineLearning {Move-AzMlCommitmentAssociation, Get-AzMlCommitmentAssocia... Az.Maintenance {Get-AzApplyUpdate, Get-AzConfigurationAssignment, Get-AzM... Az.Maintenance {Get-AzApplyUpdate, Get-AzConfigurationAssignment, Get-AzM... Az.ManagedServiceIdentity {New-AzUserAssignedIdentity, Get-AzUserAssignedIdentity, R... Az.ManagedServices {Get-AzManagedServicesAssignment, New-AzManagedServicesAss... Az.ManagedServices {Get-AzManagedServicesAssignment, New-AzManagedServicesAss... Az.MarketplaceOrdering {Get-AzMarketplaceTerms, Set-AzMarketplaceTerms} Az.Media {Sync-AzMediaServiceStorageKey, Set-AzMediaServiceKey, Get... Az.Monitor {Get-AzMetricDefinition, Get-AzMetric, Remove-AzLogProfile... Az.Monitor {Get-AzMetricDefinition, Get-AzMetric, Remove-AzLogProfile... Az.Monitor {Get-AzMetricDefinition, Get-AzMetric, Remove-AzLogProfile... Az.Network {Add-AzApplicationGatewayAuthenticationCertificate, Get-Az... Az.Network {Add-AzApplicationGatewayAuthenticationCertificate, Get-Az... Az.Network {Add-AzApplicationGatewayAuthenticationCertificate, Get-Az... Az.NotificationHubs {Get-AzNotificationHub, Get-AzNotificationHubAuthorization... Az.OperationalInsights {New-AzOperationalInsightsAzureActivityLogDataSource, New-... Az.OperationalInsights {New-AzOperationalInsightsAzureActivityLogDataSource, New-... Az.PolicyInsights {Get-AzPolicyEvent, Get-AzPolicyState, Get-AzPolicyStateSu... Az.PolicyInsights {Get-AzPolicyEvent, Get-AzPolicyState, Get-AzPolicyStateSu... Az.PowerBIEmbedded {Remove-AzPowerBIWorkspaceCollection, Get-AzPowerBIWorkspa... Az.PrivateDns {Get-AzPrivateDnsZone, Remove-AzPrivateDnsZone, Set-AzPriv... Az.RecoveryServices {Get-AzRecoveryServicesBackupProperty, Get-AzRecoveryServi... Az.RecoveryServices {Get-AzRecoveryServicesBackupProperty, Get-AzRecoveryServi... Az.RecoveryServices {Get-AzRecoveryServicesBackupProperty, Get-AzRecoveryServi... Az.RedisCache {Remove-AzRedisCachePatchSchedule, New-AzRedisCacheSchedul... Az.RedisCache {Remove-AzRedisCachePatchSchedule, New-AzRedisCacheSchedul... Az.Relay {New-AzRelayNamespace, Get-AzRelayNamespace, Set-AzRelayNa... Az.Resources {Get-AzProviderOperation, Remove-AzRoleAssignment, Get-AzR... Az.Resources {Get-AzProviderOperation, Remove-AzRoleAssignment, Get-AzR... Az.Resources {Get-AzProviderOperation, Remove-AzRoleAssignment, Get-AzR... Az.ServiceBus {New-AzServiceBusNamespace, Get-AzServiceBusNamespace, Set... Az.ServiceFabric {Add-AzServiceFabricClientCertificate, Add-AzServiceFabric... Az.ServiceFabric {Add-AzServiceFabricClientCertificate, Add-AzServiceFabric... Az.ServiceFabric {Add-AzServiceFabricClientCertificate, Add-AzServiceFabric... Az.SignalR {New-AzSignalR, Get-AzSignalR, Get-AzSignalRKey, New-AzSig... Az.SignalR {New-AzSignalR, Get-AzSignalR, Get-AzSignalRKey, New-AzSig... 2.14.0 Az.Sql {Get-AzSqlDatabaseTransparentDataEncryption, Get-AzSqlData... 2.12.0 Az.Sql {Get-AzSqlDatabaseTransparentDataEncryption, Get-AzSqlData... Az.Sql {Get-AzSqlDatabaseTransparentDataEncryption, Get-AzSqlData... Az.SqlVirtualMachine {New-AzSqlVM, Get-AzSqlVM, Update-AzSqlVM, Remove-AzSqlVM...} Az.Storage {Get-AzStorageAccount, Get-AzStorageAccountKey, New-AzStor... Az.Storage {Get-AzStorageAccount, Get-AzStorageAccountKey, New-AzStor... Az.Storage {Get-AzStorageAccount, Get-AzStorageAccountKey, New-AzStor... Az.StorageSync {Invoke-AzStorageSyncCompatibilityCheck, New-AzStorageSync... Az.StorageSync {Invoke-AzStorageSyncCompatibilityCheck, New-AzStorageSync... Az.StorageSync {Invoke-AzStorageSyncCompatibilityCheck, New-AzStorageSync... Az.StreamAnalytics {Get-AzStreamAnalyticsFunction, Get-AzStreamAnalyticsDefau... Az.Support {Get-AzSupportService, Get-AzSupportProblemClassification,... Az.TrafficManager {Add-AzTrafficManagerCustomHeaderToEndpoint, Remove-AzTraf... Az.Websites {Get-AzAppServicePlan, Set-AzAppServicePlan, New-AzAppServ... Az.Websites {Get-AzAppServicePlan, Set-AzAppServicePlan, New-AzAppServ... Az.Websites {Get-AzAppServicePlan, Set-AzAppServicePlan, New-AzAppServ... 1.0.202... AzDoRa {Get-AzDoRaReleaseDefinition, Get-AzDoRaServiceHookSubscri... 1.0.201... AzDoRa {Remove-AzDoRaServiceEndpoint, Get-AzDoRaBuildDefinition, ... Azure {Get-AzureAutomationCertificate, Get-AzureAutomationConnec... 2.0.2.106 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-... DevOpsToolkit {Split-ITIObjectsTxtFile, Join-ITIObjectsTxtFile, Import-I... 1.0.192... DevOpsToolkit {Get-TFSReleaseDefinition, Get-TfsTeamProjectMetadata, Exp... Microsoft.PowerShell.Operation.V... {Get-OperationValidation, Invoke-OperationValidation} 0.7.0.4 navcontainerhelper {Add-FontsToNavContainer, Add-GitToAlProjectFolder, Backup... PackageManagement {Find-Package, Get-Package, Get-PackageProvider, Get-Packa... Pester {Describe, Context, It, Should...} PowerShellGet {Find-Command, Find-DSCResource, Find-Module, Find-RoleCap... powershell-yaml {ConvertTo-Yaml, ConvertFrom-Yaml, cfy, cty} PSReadline {Get-PSReadLineKeyHandler, Set-PSReadLineKeyHandler, Remov...

Directory: C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules

ModuleType Version Name ExportedCommands
---------- ------- ---- ----------------
Manifest 1.0.0.0 AppBackgroundTask {Disable-AppBackgroundTaskDiagnosticLog, Enable-AppBackgro...
Manifest 2.0.0.0 AppLocker {Get-AppLockerFileInformation, Get-AppLockerPolicy, New-Ap...
Manifest 1.0.0.0 AppvClient {Add-AppvClientConnectionGroup, Add-AppvClientPackage, Add...
Manifest 2.0.1.0 Appx {Add-AppxPackage, Get-AppxPackage, Get-AppxPackageManifest...
Script 1.0.0.0 AssignedAccess {Clear-AssignedAccess, Get-AssignedAccess, Set-AssignedAcc...
Manifest 1.0.0.0 BitLocker {Unlock-BitLocker, Suspend-BitLocker, Resume-BitLocker, Re...
Manifest 2.0.0.0 BitsTransfer {Add-BitsFile, Complete-BitsTransfer, Get-BitsTransfer, Re...
Manifest 1.0.0.0 BranchCache {Add-BCDataCacheExtension, Clear-BCCache, Disable-BC, Disa...
Manifest 1.0.0.0 CimCmdlets {Get-CimAssociatedInstance, Get-CimClass, Get-CimInstance,...
Manifest 1.0 ConfigCI {Get-SystemDriver, New-CIPolicyRule, New-CIPolicy, Get-CIP...
Manifest 1.0 Defender {Get-MpPreference, Set-MpPreference, Add-MpPreference, Rem...
Manifest 1.0.1.0 DeliveryOptimization {Get-DeliveryOptimizationStatus, Get-DeliveryOptimizationP...
Manifest 1.0.0.0 DirectAccessClientComponents {Disable-DAManualEntryPointSelection, Enable-DAManualEntry...
Script 3.0 Dism {Add-AppxProvisionedPackage, Add-WindowsDriver, Add-Window...
Manifest 1.0.0.0 DnsClient {Resolve-DnsName, Clear-DnsClientCache, Get-DnsClient, Get...
Manifest 1.0.0.0 EventTracingManagement {Start-EtwTraceSession, New-EtwTraceSession, Get-EtwTraceS...
Script 1.1.0.0 IISAdministration {Get-IISAppPool, Start-IISCommitDelay, Stop-IISCommitDelay...
Manifest 2.0.0.0 International {Get-WinDefaultInputMethodOverride, Set-WinDefaultInputMet...
Manifest 1.0.0.0 iSCSI {Get-IscsiTargetPortal, New-IscsiTargetPortal, Remove-Iscs...
Script 1.0.0.0 ISE {New-IseSnippet, Import-IseSnippet, Get-IseSnippet}
Manifest 1.0.0.0 Kds {Add-KdsRootKey, Get-KdsRootKey, Test-KdsRootKey, Set-KdsC...
Manifest 1.0.1.0 Microsoft.PowerShell.Archive {Compress-Archive, Expand-Archive}
Manifest 3.0.0.0 Microsoft.PowerShell.Diagnostics {Get-WinEvent, Get-Counter, Import-Counter, Export-Counter...
Manifest 3.0.0.0 Microsoft.PowerShell.Host {Start-Transcript, Stop-Transcript}
Manifest 1.0.0.0 Microsoft.PowerShell.LocalAccounts {Add-LocalGroupMember, Disable-LocalUser, Enable-LocalUser...
Manifest 3.1.0.0 Microsoft.PowerShell.Management {Add-Content, Clear-Content, Clear-ItemProperty, Join-Path...
Script 1.0 Microsoft.PowerShell.ODataUtils Export-ODataEndpointProxy
Manifest 3.0.0.0 Microsoft.PowerShell.Security {Get-Acl, Set-Acl, Get-PfxCertificate, Get-Credential...}
Manifest 3.1.0.0 Microsoft.PowerShell.Utility {Format-List, Format-Custom, Format-Table, Format-Wide...}
Manifest 3.0.0.0 Microsoft.WSMan.Management {Disable-WSManCredSSP, Enable-WSManCredSSP, Get-WSManCredS...
Manifest 1.0 MMAgent {Disable-MMAgent, Enable-MMAgent, Set-MMAgent, Get-MMAgent...
Manifest 1.0.0.0 MsDtc {New-DtcDiagnosticTransaction, Complete-DtcDiagnosticTrans...
Manifest 2.0.0.0 NetAdapter {Disable-NetAdapter, Disable-NetAdapterBinding, Disable-Ne...
Manifest 1.0.0.0 NetConnection {Get-NetConnectionProfile, Set-NetConnectionProfile}
Manifest 1.0.0.0 NetDiagnostics Get-NetView
Manifest 1.0.0.0 NetEventPacketCapture {New-NetEventSession, Remove-NetEventSession, Get-NetEvent...
Manifest 2.0.0.0 NetLbfo {Add-NetLbfoTeamMember, Add-NetLbfoTeamNic, Get-NetLbfoTea...
Manifest 1.0.0.0 NetNat {Get-NetNat, Get-NetNatExternalAddress, Get-NetNatStaticMa...
Manifest 2.0.0.0 NetQos {Get-NetQosPolicy, Set-NetQosPolicy, Remove-NetQosPolicy, ...
Manifest 2.0.0.0 NetSecurity {Get-DAPolicyChange, New-NetIPsecAuthProposal, New-NetIPse...
Manifest 1.0.0.0 NetSwitchTeam {New-NetSwitchTeam, Remove-NetSwitchTeam, Get-NetSwitchTea...
Manifest 1.0.0.0 NetTCPIP {Get-NetIPAddress, Get-NetIPInterface, Get-NetIPv4Protocol...
Manifest 1.0.0.0 NetworkConnectivityStatus {Get-DAConnectionStatus, Get-NCSIPolicyConfiguration, Rese...
Manifest 1.0.0.0 NetworkSwitchManager {Disable-NetworkSwitchEthernetPort, Enable-NetworkSwitchEt...
Manifest 1.0.0.0 NetworkTransition {Add-NetIPHttpsCertBinding, Disable-NetDnsTransitionConfig...
Manifest 1.0.0.0 PcsvDevice {Get-PcsvDevice, Start-PcsvDevice, Stop-PcsvDevice, Restar...
Binary 1.0.0.0 PersistentMemory {Get-PmemDisk, Get-PmemPhysicalDevice, Get-PmemUnusedRegio...
Manifest 1.0.0.0 PKI {Add-CertificateEnrollmentPolicyServer, Export-Certificate...
Manifest 1.0.0.0 PnpDevice {Get-PnpDevice, Get-PnpDeviceProperty, Enable-PnpDevice, D...
Manifest 1.1 PrintManagement {Add-Printer, Add-PrinterDriver, Add-PrinterPort, Get-Prin...
Binary 1.0.11 ProcessMitigations {Get-ProcessMitigation, Set-ProcessMitigation, ConvertTo-P...
Script 3.0 Provisioning {Install-ProvisioningPackage, Export-ProvisioningPackage, ...
Manifest 1.1 PSDesiredStateConfiguration {Set-DscLocalConfigurationManager, Start-DscConfiguration,...
Script 1.0.0.0 PSDiagnostics {Disable-PSTrace, Disable-PSWSManCombinedTrace, Disable-WS...
Binary 1.1.0.0 PSScheduledJob {New-JobTrigger, Add-JobTrigger, Remove-JobTrigger, Get-Jo...
Manifest 2.0.0.0 PSWorkflow {New-PSWorkflowExecutionOption, New-PSWorkflowSession, nwsn}
Manifest 1.0.0.0 PSWorkflowUtility Invoke-AsWorkflow
Manifest 1.0.0.0 ScheduledTasks {Get-ScheduledTask, Set-ScheduledTask, Register-ScheduledT...
Manifest 2.0.0.0 SecureBoot {Confirm-SecureBootUEFI, Set-SecureBootUEFI, Get-SecureBoo...
Manifest 2.0.0.0 SmbShare {Get-SmbShare, Remove-SmbShare, Set-SmbShare, Block-SmbSha...
Manifest 2.0.0.0 SmbWitness {Get-SmbWitnessClient, Move-SmbWitnessClient, gsmbw, msmbw...
Manifest 1.0.0.0 StartLayout {Export-StartLayout, Import-StartLayout, Export-StartLayou...
Manifest 2.0.0.0 Storage {Add-InitiatorIdToMaskingSet, Add-PartitionAccessPath, Add...
Manifest 1.0.0.0 StorageBusCache {Clear-StorageBusDisk, Disable-StorageBusCache, Disable-St...
Manifest 2.0.0.0 TLS {New-TlsSessionTicketKey, Enable-TlsSessionTicketKey, Disa...
Manifest 1.0.0.0 TroubleshootingPack {Get-TroubleshootingPack, Invoke-TroubleshootingPack}
Manifest 2.0.0.0 TrustedPlatformModule {Get-Tpm, Initialize-Tpm, Clear-Tpm, Unblock-Tpm...}
Binary 2.1.639.0 UEV {Clear-UevConfiguration, Clear-UevAppxPackage, Restore-Uev...
Manifest 2.0.0.0 VpnClient {Add-VpnConnection, Set-VpnConnection, Remove-VpnConnectio...
Manifest 1.0.0.0 Wdac {Get-OdbcDriver, Set-OdbcDriver, Get-OdbcDsn, Add-OdbcDsn...}
Manifest 1.0.0.0 WebAdministration {Start-WebCommitDelay, Stop-WebCommitDelay, Get-WebConfigu...
Manifest 1.0.0.0 WindowsDeveloperLicense {Get-WindowsDeveloperLicense, Unregister-WindowsDeveloperL...
Script 1.0 WindowsErrorReporting {Enable-WindowsErrorReporting, Disable-WindowsErrorReporti...
Manifest 1.0.0.0 WindowsSearch {Get-WindowsSearchSetting, Set-WindowsSearchSetting}
Manifest 1.0.0.0 WindowsUpdate Get-WindowsUpdateLog
Manifest 1.0.0.2 WindowsUpdateProvider {Get-WUAVersion, Get-WULastInstallationDate, Get-WULastSca...
```

## Debug output

```
PS C:\WINDOWS\system32> connect-azaccount -debug
DEBUG: 5:30:38 PM - ConnectAzureRmAccountCommand begin processing with ParameterSet 'UserWithSubscriptionId'.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y

Confirm
Are you sure you want to perform this action?
Performing the operation "log in" on target "User account in environment 'AzureCloud'".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): y
DEBUG: 5:30:42 PM - Autosave setting from startup session: 'CurrentUser'

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: 5:30:43 PM - No autosave setting detected in environment variable 'AzContextAutoSave'.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: 5:30:44 PM - Using Autosave scope 'CurrentUser'

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: InteractiveBrowserCredential.Authenticate invoked. Scopes: [ https://management.core.windows.net//.default ]
ParentRequestId:

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: InteractiveBrowserCredential.Authenticate was unable to retrieve an access token. Scopes: [
https://management.core.windows.net//.default ] ParentRequestId: Exception:
Azure.Identity.AuthenticationFailedException (0x80131500): InteractiveBrowserCredential authentication failed:
Persistence check failed. Inspect inner exception for details
---> Microsoft.Identity.Client.Extensions.Msal.MsalCachePersistenceException (0x80131500): Persistence check failed.
Inspect inner exception for details
---> System.Security.Cryptography.CryptographicException (0x80070000): The operation completed successfully.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
WARNING: Unable to acquire token for tenant 'organizations'

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
WARNING: Please run 'Connect-AzAccount -DeviceCode' if browser is not supported in this session.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: Azure.Identity.AuthenticationFailedException: InteractiveBrowserCredential authentication failed: Persistence
check failed. Inspect inner exception for details --->
Microsoft.Identity.Client.Extensions.Msal.MsalCachePersistenceException: Persistence check failed. Inspect inner
exception for details ---> System.Security.Cryptography.CryptographicException: The operation completed successfully.

at System.Security.Cryptography.ProtectedData.Unprotect(Byte[] encryptedData, Byte[] optionalEntropy,
DataProtectionScope scope)
at Microsoft.Identity.Client.Extensions.Msal.DpApiEncryptedFileAccessor.Read()
at Microsoft.Identity.Client.Extensions.Msal.MsalCacheStorage.VerifyPersistence()
--- End of inner exception stack trace ---
at Microsoft.Identity.Client.Extensions.Msal.MsalCacheStorage.VerifyPersistence()
at Azure.Identity.PersistentTokenCache.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.PersistentTokenCache.d__8.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalClientBase`1.d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalPublicClient.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__32.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__30.MoveNext()
--- End of inner exception stack trace ---
at Azure.Identity.CredentialDiagnosticScope.FailWrapAndThrow(Exception ex)
at Azure.Identity.InteractiveBrowserCredential.d__30.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__27.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Authenticators.MsalAccessToken.d__34.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzureAccount
account, IAzureEnvironment environment, String tenant, SecureString password, String promptBehavior, Action`1
promptAction, IAzureTokenCache tokenCache, String resourceId)
at Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.AcquireAccessToken(IAzureAccount account,
IAzureEnvironment environment, String tenantId, SecureString password, String promptBehavior, Action`1 promptAction)
at Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.ListAccountTenants(IAzureAccount account,
IAzureEnvironment environment, SecureString password, String promptBehavior, Action`1 promptAction)
at Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.Login(IAzureAccount account, IAzureEnvironment
environment, String tenantId, String subscriptionId, String subscriptionName, SecureString password, Boolean
skipValidation, Action`1 promptAction, String name, Boolean shouldPopulateContextList, Int32 maxContextPopulation)
at Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.<>c__DisplayClass111_2.b__4()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at
Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.<>c__DisplayClass111_0.b__1(AzureRmProfile
localProfile, RMProfileClient profileClient, String name)

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y

Confirm
InteractiveBrowserCredential authentication failed: Persistence check failed. Inspect inner exception for details
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
connect-azaccount : InteractiveBrowserCredential authentication failed: Persistence check failed. Inspect inner
exception for details
At line:1 char:1
+ connect-azaccount -debug
+ ~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : CloseError: (:) [Connect-AzAccount], AuthenticationFailedException
+ FullyQualifiedErrorId : Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand

DEBUG: AzureQoSEvent: CommandName - Connect-AzAccount; IsSuccess - False; Duration - 00:00:18.7486209;; Exception -
Azure.Identity.AuthenticationFailedException: InteractiveBrowserCredential authentication failed: Persistence check
failed. Inspect inner exception for details --->
Microsoft.Identity.Client.Extensions.Msal.MsalCachePersistenceException: Persistence check failed. Inspect inner
exception for details ---> System.Security.Cryptography.CryptographicException: The operation completed successfully.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: Finish sending metric.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
DEBUG: 5:30:59 PM - ConnectAzureRmAccountCommand end processing.

Confirm
Continue with this operation?
[Y] Yes [A] Yes to All [H] Halt Command [S] Suspend [?] Help (default is "Y"): y
```

## Error output

```
PS C:\WINDOWS\system32> Resolve-AzError
WARNING: Upcoming breaking changes in the cmdlet 'Resolve-AzError' :
The `Resolve-Error` alias will be removed in a future release. Please change any scripts that use this alias to use
`Resolve-AzError` instead.
Note : Go to https://aka.ms/azps-changewarnings for steps to suppress this breaking change warning, and other
information on breaking changes in Azure PowerShell.

HistoryId: 1

Message : InteractiveBrowserCredential authentication failed: Persistence check failed. Inspect inner exception
for details
StackTrace : at Azure.Identity.CredentialDiagnosticScope.FailWrapAndThrow(Exception ex)
at Azure.Identity.InteractiveBrowserCredential.d__30.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__27.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.PowerShell.Authenticators.MsalAccessToken.d__34.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Microsoft.Azure.Commands.Common.Authentication.Factories.AuthenticationFactory.Authenticate(IAzu
reAccount account, IAzureEnvironment environment, String tenant, SecureString password, String
promptBehavior, Action`1 promptAction, IAzureTokenCache tokenCache, String resourceId)
at
Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.AcquireAccessToken(IAzureAccount
account, IAzureEnvironment environment, String tenantId, SecureString password, String
promptBehavior, Action`1 promptAction)
at
Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.ListAccountTenants(IAzureAccount
account, IAzureEnvironment environment, SecureString password, String promptBehavior, Action`1
promptAction)
at Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient.Login(IAzureAccount account,
IAzureEnvironment environment, String tenantId, String subscriptionId, String subscriptionName,
SecureString password, Boolean skipValidation, Action`1 promptAction, String name, Boolean
shouldPopulateContextList, Int32 maxContextPopulation)
at Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.<>c__DisplayClass111_2.b__4()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.<>c__DisplayClass111_0.b__1(AzureRmProfile localProfile, RMProfileClient profileClient, String name)
at Microsoft.Azure.Commands.Profile.Common.AzureContextModificationCmdlet.ModifyContext(Action`2
contextAction)
at
Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.SetContextWithOverwritePrompt(Action`3
setContextAction)
at Microsoft.Azure.Commands.Profile.ConnectAzureRmAccountCommand.ExecuteCmdlet()
at Microsoft.WindowsAzure.Commands.Utilities.Common.AzurePSCmdlet.ProcessRecord()
Exception : Azure.Identity.AuthenticationFailedException
InvocationInfo : {Connect-AzAccount}
Line : connect-azaccount -debug
Position : At line:1 char:1
+ connect-azaccount -debug
+ ~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

Message : Persistence check failed. Inspect inner exception for details
StackTrace : at Microsoft.Identity.Client.Extensions.Msal.MsalCacheStorage.VerifyPersistence()
at Azure.Identity.PersistentTokenCache.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.PersistentTokenCache.d__8.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalClientBase`1.d__16.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.MsalPublicClient.d__9.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__32.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Azure.Identity.InteractiveBrowserCredential.d__30.MoveNext()
Exception : Microsoft.Identity.Client.Extensions.Msal.MsalCachePersistenceException
InvocationInfo : {Connect-AzAccount}
Line : connect-azaccount -debug
Position : At line:1 char:1
+ connect-azaccount -debug
+ ~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

Message : The operation completed successfully.

StackTrace : at System.Security.Cryptography.ProtectedData.Unprotect(Byte[] encryptedData, Byte[]
optionalEntropy, DataProtectionScope scope)
at Microsoft.Identity.Client.Extensions.Msal.DpApiEncryptedFileAccessor.Read()
at Microsoft.Identity.Client.Extensions.Msal.MsalCacheStorage.VerifyPersistence()
Exception : System.Security.Cryptography.CryptographicException
InvocationInfo : {Connect-AzAccount}
Line : connect-azaccount -debug
Position : At line:1 char:1
+ connect-azaccount -debug
+ ~~~~~~~~~~~~~~~~~~~~~~~~
HistoryId : 1

The Azure PowerShell team is listening, please let us know how we are doing: https://aka.ms/azpssurvey?Q_CHL=ERROR.
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the failure with the documented Connect-AzAccount command in Windows PowerShell 5.1, then inspect the Az.Accounts authentication path associated with InteractiveBrowserCredential and token cache persistence. Done means identifying and addressing the cause of the persistence failure so Connect-AzAccount can authenticate successfully, with the reported environment and warnings considered.

Written by the indexing model from the issue text.

Assessment

Tech stack: azure, csharp, powershell
Domain: authentication, cli, cloud
Issue type: Bug
Difficulty: 4/5
Estimated time: 3-5 days
Activity status: Stale
Clarity: Needs clarification
Newbie friendliness: 25/100

Unable to connect to Azure from Powershell [Windows 10]

Description

Contributor guide

Research direction

Assessment

Get new issues in your inbox