RDP connection to VMSS instances refused for service-fabric-secure-cluster-5-node-1-nodetype deployment

[service-fabric-secure-cluster-5-node-1-nodetype](https://github.com/Azure/azure-quickstart-templates/tree/master/service-fabric-secure-cluster-5-node-1-nodetype)

Hello and thank you for your templates!

I have the following problem with the [service-fabric-secure-cluster-5-node-1-nodetype](https://github.com/Azure/azure-quickstart-templates/tree/master/service-fabric-secure-cluster-5-node-1-nodetype) template:

The deployment works for me and I am able to open the SF cluster (the webpage with the green circles) after the deployment.

However I am unable to RDP connect to any of the instances eventhough I use the same strings which I had specified for the **adminUsername** and **adminPassword** parameters:


I use the Loader public IP address for the RDP connection and have verified that there is an LB rule for that:


When I enter the **adminUsername** and **adminPassword** strings I had specified during the ARM template deployment, the RDP connection prepends the domain of my corporate notebook (which is wrong).

So I have tried prepending the LB public ip address followed by a backslash in front of the adminUsername but that does not work either.

Also I have tried **.\adminUsername** (takes my corporates notebook's domain which is wrong) and **adminUsername** and **nt1vm_1\adminUsername** (still the connection is refused).

With Microsoft Remote Desktop for mac OS I cannot connect either:


How can I RDP-connect to an instance of the VMSS of an SF cluster please?

PS: I have also asked [the same question at Stackoverflow](https://stackoverflow.com/questions/62362753/cannot-rdp-to-an-instance-of-virtual-machine-scale-set-of-a-service-fabric-clust).

Start with the service-fabric-secure-cluster-5-node-1-nodetype template linked in the issue and inspect how the VMSS admin parameters and Loader public IP RDP load-balancer rule are configured. Reproduce the deployment and RDP attempts described for Windows and macOS, then compare the behavior with the linked Stack Overflow question. Done means the template's RDP connection path and required username format are documented or corrected.

Written by the indexing model from the issue text.