Problem is, that after a new deployment or a move within Azure ASR, RDP requires NLA (which isn’t applicable in my environment).
Checked two possible solutions to solve this issues, both worked:
- Login with local admin rights and de-activate NLA for RDP
- Configure a GPO that deactivates NLA for RDP