Users are unable to restart Static Private Desktops from StoreFront when machine is allocated to a user group.

STEPS TO REPRODUCE THE ISSUE

• Create a user group named "TestGroup" and add user "Test1" to this group.
• Create a Machine Catalog with allocation type "static" for Desktop OS.
• Create a Delivery Group with Delivery Type "DesktopOnly" and DesktopKind "Private" i.e dedicated and add the machines from the above Machine Catalog.
• In the "Machine Allocation" Tab assign the Desktops to User Group "TestGroup" and not the users "Test1" 

• Now, user "Test1" will be able to launch the desktop but while restarting the Desktop from StoreFront, the machine will not reboot but rather the user will disconnect and will then reconnect to the same session.

• Now if you add the user "Test1" explicitly to "Machine Allocation" tab i.e assign the machine to the User instead of User Group, then this time when the user clicks "Restart",  the machine will actually reboot.

Always add "User" explicitly instead of "User Group" to "Machine Allocation" tab of "Delivery Group" in order to allow the user to Restart machines from StoreFront.

---

Problem Cause

In CDF Trace from Delivery Controller you will see "No machine found to power off".

1149,3,2018/05/16 11:01:30:88985,13124,1796,0,BrokerDAL,_#dotNet#_,0,,5,EntryExit,"DAL <<< GetWorkerDetailsForRestart(VDI-Win10): returns ","" 

1150,3,2018/05/16 11:01:30:88986,13124,1796,0,BrokerComponent,_#dotNet#_,0,,1,Information,"BrokerComponent.PowerOffMachine: No machine found to power off","" 

1151,3,2018/05/16 11:01:30:88991,13124,1796,0,BrokerXmlServices,_#dotNet#_,0,,1,Information,"RequestPowerOffMachineTransaction.HandleRequest: PowerOffMachine result = NoMachine","" 

This is an expected behavior.

By Design when the user logs onto StoreFront, StoreFront sends both user's SID and user's GroupSIDs and DDC checks the Site database to see whether any of those SID’s is a match to find the available resources and launch the application/desktop.

However, for  PowerOffMachine request, i.e. Restart request,  StoreFront sends just the user SID, so we can't look for Group SID match in the Database to give the restart rights.
 

Users Are Unable To Restart Static Private Desktops From StoreFront When Machine Is Allocated To A User Group