But why the public IP wizard configures this as default (no source IP filtering) till today? RDP without Remote desktop role is vulnerable till today by a flaw in the non cred ssp based login procedures.Īnd why Javascript is disabled in IE11 (and why IE11 is distributed with a VM that is announced as 'patched till Jan 2022') and then this -censored by myself- onedrive setup? Well you can download Onedrive, it somehow bypasses the IE11 download prohibition. Ok no public IP for RDP without source IP filtering, because this is terribly unsave, understood. So where to look at? For sure not in any firewall ports.

But two years ago (to be precise MAy 2020) it was allowed. above they say 'can't download anything.' is very unspecific, however even if I disable the enhanced server IE security it still says that 'downloads are not allowed by your organisation' or similar. Well I am not new to Azure, and I observe that Microsoft cant stop itself from modifying the OS in the VMs in a way that is neither documented well nor static. Let us know the results of the above, so we can troubleshoot further :-) In the command prompt, try to ping a public IP ('ping 1.1.1.1').Check that there is no proxy server set in Internet Explorer.

In the displayed results, check that the 'Default gateway' is setup to the right IP address (your selected subnet IP range, with '1' at the end.

Back in the command prompt, type 'ipconfig /all'.

Either change this back to the default Azure DNS or further check why this internal DNS server might not be accessible

If the associated IP is private, it means that the DNS server is setup within your vNET configuration and your server is expecting to resolve internet names through another internal server.

In the displayed results, check that the 'DNS servers' have IP addresses associated and that they are NOT private (starting with 10.x.x.x or .x or 172.16.x.x to 172.24.x.x).

In the command prompt, type 'ipconfig /all'.

If on the other hand, you see that an IP address is returned and the server tries to ping google, then it's an internet connectivity problem.If you see an error saying that this name cannot be resolved, it's a DNS issue.Open a command prompt (click start and type 'cmd').If disabling IE enhanced security doesn't work, let's do some further troubleshooting.įirst, determine if it's a DNS issue or a network connectivity issue:

I cant download google chrome