Skip To Content

Troubleshoot ArcGIS Enterprise on Microsoft Azure

If you encounter issues using ArcGIS Enterprise Cloud Builder for Microsoft Azure, see the log files created in the %temp% directory where Cloud Builder is installed (by default, the directory is C:\Users\<your login>\AppData\local\temp). Additional troubleshooting tips are provided in this topic.

Also note that virtual machines created during a failed deployment process are not automatically deleted. This allows you to connect to the virtual machine and check the Windows event logs or the Cloud Builder deployment log (C:\arcgis\Deploy\deploy-log.txt) to troubleshoot the deployment failure. However, this means you need to clean up these virtual machines yourself after you finish troubleshooting. Use the Microsoft Azure Management Portal to delete machines that have been provisioned before you retry deploying a site.

ArcGIS Enterprise Cloud Builder for Microsoft Azure

Site administration


ArcGIS Enterprise Cloud Builder for Microsoft Azure

I receive the message ResourcePurchaseValidationFailed: User failed validation to purchase resources. Error message: 'Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal and configure programmatic deployment for the Marketplace item or create it there for the first time when I attempt to deploy an ArcGIS Server site or ArcGIS Enterprise site using Cloud Builder.

Microsoft Azure requires you to accept their license agreement before you can use images from the Azure Marketplace. Your Azure subscription administrator must perform a set of manual steps in the Azure portal and accept Azure's legal terms once for each unique image before you can deploy a site using Cloud Builder.

I receive an unhandled exception error in Cloud Builder when the Microsoft Azure session token expires.

This typically occurs if you leave Cloud Builder open and idle for many hours. Cloud Builder currently is not getting a new token when the existing one expires. Close and reopen Cloud Builder after each individual deployment operation to get a new session token from Microsoft Azure.

I am unable to sign out of Cloud Builder.

If you need to sign out of Cloud Builder, for example, if you have more than one Microsoft Azure account and need to switch the account you're signed in with, you need to do the following to log out of Cloud Builder:

  1. Log out of all other Microsoft Azure clients on that same machine. If you stay logged in to Azure from another client, the session token persists.
  2. Close and reopen your web browser.
  3. Clear the browser cache. Delete all cookies and history when you clear the cache.

Site administration

I cannot make a Remote Desktop Connection to the Microsoft Azure virtual machine.

Confirm you typed the correct login and password. You should log in with the login and password you specified for the machine administrator when you deployed your site using ArcGIS Enterprise Cloud Builder for Microsoft Azure.

If you typed the login and password correctly but still cannot make a Remote Desktop Connection, it is likely that your organization's firewall is blocking access. Contact your network administrator to allow access to Microsoft Azure virtual machines through the firewall.


You cannot make a Remote Desktop Connection to a SQL Database machine. If you want to connect to a SQL Database from a remote machine, you must first configure the firewall on the Azure SQL Database's virtual machine to allow remote connections and add the IP address of the remote client to the SQL Database machine.

Administrative access is enabled via the web proxy by default, but I don't want it enabled.

Do the following to disable administrative access through the web proxy URL:

  1. Make a remote desktop connection to each of the web proxy instances. Log in using the machine administrator credentials you specified in Cloud Builder when you deployed the site.
  2. Open the c:\inetpub\wwwroot\web.config file in a text editor.
  3. Remove admin or portaladmin tokens from the match URL rules.

    For example, remove admin from the match URL tag of the "RP-HTTP-Server" rule name text before removing

    <rule name="RP-HTTP-Server" stopProcessing="true">
                        <match url="^[^/]+/(manager|admin|rest|services|mobile|tokens|login|help)(/?)(.*)" />

    After you remove the admin token, the tag will look like the following:

    <rule name="RP-HTTP-Server" stopProcessing="true">
                        <match url="^[^/]+/(manager|rest|services|mobile|tokens|login|help)(/?)(.*)" />

  4. Save changes to the web.config file and close it.

After installing an SSL (TLS) certificate, the URL property on existing web service items—including the utility services that come with Portal for ArcGIS—is not updated. They still use the original * URL.

To correct this, use the Portal REST API to update the URL property. The URL of the Portal REST endpoint is in the format https://<portal machine>.<region> Log in using the portal administrator credentials you specified in Cloud Builder when you deployed ArcGIS Enterprise.

I can't open the Microsoft Azure Portal, Azure Marketplace, or Azure pricing calculator.

You might be using a browser or device that is not supported by Microsoft Azure. See Microsoft Azure documentation for supported browsers and devices for specific information.


Publishing to my portal on Microsoft Azure fails, and I receive the message Publish exception 'Exception: no protocol: null/admin/services/exists'.

Occasionally, a race condition occurs between the start of the portal and ArcGIS Server services, which results in an invalid configuration.

To correct this, make a remote desktop connection to the portal machine and restart the Portal for ArcGIS service. Log in using the machine administrator credentials you specified in Cloud Builder when you deployed ArcGIS Enterprise.