Azure Virtual Desktop’s August 2026 update is a packed one, delivering four significant new features that touch on security, connection resilience, authentication, and printing. From macOS passwordless authentication to RAW printing support for specialized devices, there’s something here for every AVD administrator to evaluate. Let’s break down each update.
1. macOS Preview Support for In-Session Passwordless Authentication
Microsoft continues to expand passwordless authentication across platforms, and this month it’s macOS’s turn. In-session passwordless authentication is now in preview for the Windows App on macOS.
What It Does
This feature allows users to complete in-session WebAuthn challenges using passkeys stored on the macOS device or connected to it — including software-based passkeys (like those in Microsoft Authenticator) and hardware security keys connected via USB or NFC, or paired through QR code.
How It Works
The feature leverages WebAuthn redirection — the local macOS device’s supported authenticator is redirected into the remote AVD session. When a remote application or website issues a WebAuthn challenge, that challenge is transparently forwarded to the local macOS device, which completes it using the stored passkey. The remote session sees this as a local authentication event, providing a seamless passwordless experience.
Previously, this capability was available on Windows clients. With this preview, Microsoft extends it to macOS, closing a significant gap for organizations with mixed-device fleets.
Why It Matters
- Eliminates password prompts during in-session authentication flows on macOS
- Improves security posture by reducing credential exposure
- Supports hardware security keys — not just software passkeys — giving organizations flexibility in their authentication strategy
- No additional configuration required when WebAuthn redirection is already enabled
Prerequisites
- Windows App on macOS (preview build)
- WebAuthn redirection enabled via RDP properties (
redirectwebauthn) - Passkey provider on the macOS device (Microsoft Authenticator, hardware key, etc.)
For more details, see the Compare Windows App features across platforms and devices documentation.
2. Modern Auto-Reconnect Begins Rollout
First announced as a public preview earlier in August, Modern Auto-Reconnect is now beginning its broader phased rollout across Azure Virtual Desktop deployments.
What It Does
Modern Auto-Reconnect preserves the current connection state during temporary network interruptions and automatically restores connectivity when a network path becomes available — without requiring user intervention.
How It Works
Powered by RDP Multipath, the feature maintains awareness of available network paths. When a connection drops or degrades, rather than tearing down the session and requiring a full reconnect, the client preserves the session state and attempts to re-establish connectivity through an alternate path. Once a path is available, the session resumes seamlessly.
Key Technical Details
- Requires: Updated connection model and RDP Multipath support
- Client requirement: Windows App for Windows version 2.0.1069.0 or later
- Current availability: Azure Virtual Desktop validation ring
- Rollout approach: Phased, quality-driven rollout to ensure stability
- Opt-in: Organizations can access the feature by moving host pools to the validation ring
Why It Matters
Network interruptions have been one of the most frustrating aspects of remote desktop computing. A brief Wi-Fi hiccup, VPN tunnel reset, or ISP outage traditionally killed the AVD session, forcing users to reconnect manually — often losing unsaved work or workflow context. Modern Auto-Reconnect eliminates this pain point:
- Faster recovery — session resumes automatically when connectivity returns
- Fewer user-visible disruptions — users may not even notice brief network blips
- Better experience during network transitions — switching between Wi-Fi and wired, or between networks, becomes seamless
- Reduced support tickets — fewer “I got disconnected” calls to the help desk
For more information, see the Modern Auto-Reconnect documentation.
3. Screen Capture Protection for Web Connections Is Now Available
Screen Capture Protection isn’t new to AVD — it’s been available for Windows and macOS clients for some time. But now, it extends to web browser connections, closing a significant security gap for browser-based access.
What It Does
When enabled, Screen Capture Protection prevents the remote session’s screen content from being captured via screenshots, screen recording tools, or screen-sharing functionality in supported web browsers. If a user attempts to take a screenshot or share their screen during a remote session, the AVD content is blocked or hidden.
How It Works
The protection operates at two levels:
Server-side (session host): Configured via Intune device configuration policy or Group Policy. The policy setting lives under Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Azure Virtual Desktop > Enable screen capture protection.
Client-side enforcement: For web connections (and mobile platforms), enforcement is through Intune Mobile Application Management (MAM) app protection policies. A Conditional Access policy ensures the app protection policy is applied, so users can only connect when the policy is in effect.
Two Protection Modes
- Block screen capture on client — prevents capture on the local device
- Block screen capture on client and server — prevents capture on both the local device and within the session host itself
Why It Matters
Web browser access to AVD is increasingly common, especially for BYOD scenarios and contractor access. Until now, Screen Capture Protection only covered desktop clients — leaving browser-based sessions unprotected. This update:
- Extends data protection to all access methods
- Prevents sensitive information leakage through screenshots or screen recording
- Supports compliance requirements for regulated industries
- Requires no additional infrastructure — policy-driven enforcement only
For configuration details, see Enable screen capture protection.
4. RAW Printing Support (Public Preview)
Printing in remote desktop environments has always been tricky, and RAW printing support entering public preview addresses a long-standing compatibility gap for specialized printing devices.
What It Does
Administrators can now configure printer redirection to use RAW print jobs instead of XPS. This is critical for devices like label printers, receipt printers, and other specialized hardware that require RAW format and don’t work reliably with XPS-based printing.
How to Configure
RAW printing is controlled via the host pool RDP property SmartRawPrinters:s:<value>:
| Value | Behavior |
|---|---|
* | Enables RAW print support for all redirected printers |
<driver name prefix> | Enables RAW print support only for printers whose driver name starts with that prefix |
Printer redirection must be enabled for RAW printing to work.
Finding the Driver Name Prefix
To determine the correct prefix:
- Connect the printer locally on a Windows device
- Open Device Manager
- Expand Printers
- Open the printer’s Properties
- Use the Model value as the prefix
Why It Matters
- Better compatibility with label printers, receipt printers, and other specialized devices
- Reduced driver management — fewer printer drivers needed on session hosts
- Simplified troubleshooting — eliminates XPS conversion issues for problematic printers
- Broader deployment scenarios — supports retail, manufacturing, and logistics use cases that depend on RAW printing
For full configuration details, see Configure printer redirection.
Summary
August 2026 is a strong month for Azure Virtual Desktop. Here’s a quick recap:
| Feature | Status | Key Benefit |
|---|---|---|
| macOS in-session passwordless auth | Preview | Passwordless WebAuthn on macOS |
| Modern Auto-Reconnect rollout | Phased GA rollout | Seamless session recovery |
| Screen Capture Protection for web | Available | Browser session security |
| RAW printing support | Public Preview | Specialized printer compatibility |
These updates reflect Microsoft’s continued investment in AVD across three key dimensions: security (passwordless, screen capture protection), resilience (auto-reconnect), and compatibility (RAW printing). For organizations running AVD in production, each of these addresses a real operational pain point.
If you want to stay current with AVD updates, follow along at @kkaminsk on X for threads and analysis, and check back here for in-depth coverage of each new feature as it rolls out.
For the official Microsoft Learn documentation, see What’s new in Azure Virtual Desktop.