Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article describes current limitations of the computer use tool and provides solutions for common issues you might encounter during setup or execution.
Limitations
The following limitations affect computer use:
- Hosted machine groups aren't supported.
- Multi-screen desktops aren't supported.
- Running computer use from a topic isn't supported.
- Customer-Managed Keys (CMK) aren't supported when using OpenAI's Computer-Using Agent AI model.
- In the agent's Activity tab, the agent session status might show as "In progress", although the session might be completed. Select a specific agent session and switch to transcript mode to validate that the computer use session is completed.
Hosted browser limitations
The service might throttle hosted browser usage based on demand. Therefore, it's not recommended for production use.
Note
You might see the error message "No machine able to run the automation has been found." when starting a computer use session on hosted browser. This error can occur if you already have an active session on hosted browser, if a demand-based throttling limit is reached, or due to an internal error. We're working to improve this experience.
The following scenarios might cause throttling:
| Category | Details | Impact |
|---|---|---|
| User based throttling | A user can have one active hosted browser session at any given time. Any subsequent computer use session on a hosted browser fails. | Session fail |
| Demand based throttling | Depending on overall demand, throttling might be applied and computer use session on a hosted browser fails. | Session fail |
Troubleshooting
If you encounter issues while using computer use, review these common problems and their solutions:
| Issue | Solution |
|---|---|
| Computer use execution fails with error: "Multi-factor auth (MFA) was detected as required for this account." When using Microsoft Entra ID credentials on a device with Network Level Authentication (NLA) enabled, or when Microsoft Entra authentication is required for Remote Desktop, you must either grant an MFA exception for the account or use certificate-based authentication. | - Disable NLA. Learn more in Desktop flows run failed with MSEntraLogonFailure - Provide admin consent for unattended runs using sign-in credentials with NLA. Learn more in Run unattended desktop flows. |
| A disconnected session exists for the user used in the connection on the target machine. Make sure the user signs out from any existing session. | - Connect to the machine using Remote Desktop. Open the Windows Start menu, select your user profile icon, and then select Sign out. |
| An automation is already running on the machine. Retry later. | - If you just tested or ran computer use, wait 2–3 minutes before trying again. |
| The test function on computer use tool doesn't work properly. For example, the test ends abruptly with an error: "The computer use tool is not a part of the planned execution sequence." | Test using the agent’s test chat instead, and review the descriptions (instructions) provided to the agent to ensure it has sufficient context to trigger computer use. |
Error codes
The following table lists error codes you might encounter when running the computer use tool, along with a short description and suggested resolution.
| Error code | Description | Resolution |
|---|---|---|
| AccountLockedOut | The account used for the machine connection is locked. | Unlock the account and sign-out, then reconnect. |
| ConnectionAuthorizationFailed | The connection used by the tool couldn't be authorized. | Edit the connection and reauthenticate. |
| ConnectionNotEstablished | A connection to the machine couldn't be established. | Verify the machine is online and is connected by validating the status on the Power Automate machine page. |
| ConnectionTimeout | The connection to the machine timed out. | Verify the machine is online and is connected by validating the status on the Power Automate machine page. |
| CUAClarificationConnectionOwnerNotReviewer | A human review request couldn't be routed because the connection owner isn't configured as a reviewer. | Add the connection owner to the human supervision reviewers, or route the connection through a designated reviewer. Learn more in Human supervision of computer use. |
| CUAClarificationNoReviewers | No reviewers are configured for human supervision. | Add at least one reviewer in the tool's Human supervision section. Learn more in Human supervision of computer use. |
| CUACredentialNoMatch | The referenced credential didn't match an available credential. | Make sure that there is an existing credential in the CUA tool matching the application/website. If not, create one. Learn more in Add computer use to your agent. |
| CUAHitlRequestTimeout | A human-in-the-loop review request timed out without a response. | Respond to human review requests before the configured timeout. Learn more in Respond to human review requests. |
| CUAModelExecutionFailure | The AI model execution failed. | Review the session and instructions provided to ensure context and information required is provided. Then, retry the session. If the error persists, contact support. |
| CUANotSupported | Computer use isn't supported in the current context. | Verify the agent, environment, and channel are supported for computer use. Learn more in Configure where computer use runs. |
| CUASendHitlRequestFailed | The service couldn't send a human-in-the-loop review request. | Verify the configured reviewers are valid users with email access. Learn more in Respond to human review requests. |
| CUAUnsupportedChannel | Computer use isn't supported in the current channel. | Use computer use from a supported channel. Learn more in Limitations. |
| CuaDesktopAppIsNotAllowlisted | The desktop application isn't on the allowlist. | Add the desktop application to the allowlist in the tool's settings. Learn more in Add computer use to your agent. |
| CuaInsertCredentialNotAllowedInInsecureWebsites | Inserting a credential on a non-HTTPS website is blocked. | Use the HTTPS version of the website or disable HTTPS enforcement. Learn more in Add computer use to your agent. |
| CuaWebsiteIsNotAllowlisted | The website isn't on the allowlist. | Add the website to the allowlist in the tool's settings. Learn more in Add computer use to your agent. |
| CuaWebsiteIsNotSecure | The website isn't served over HTTPS. | Use the HTTPS version of the website or disable HTTPS enforcement. Learn more in Add computer use to your agent. |
| EndpointDoNotExist | The target endpoint doesn't exist. | Verify the configured URL or resource identifier. |
| FeatureDisabled | Computer use is disabled for the environment or tenant. | Enable computer use from the admin center. Learn more in Administer computer use. |
| InputContentFiltered | The prompt was filtered by Responsible AI content safety. | Revise the instruction or input to comply with content safety policies. |
| MachineGroupNotFound | The machine group wasn't found. | Verify the machine group exists and the user has access to it on the Power Automate machine page. |
| ModelNotSupported | The specified AI model isn't supported. | Select a supported model. Learn more in Add computer use to your agent. |
| MSEntraLogonFailure | Microsoft Entra sign-in failed. | Verify the account credentials to be correct. |
| MSEntraMachineAlwaysPromptingForPassword | The machine is repeatedly prompting for the account password. | Verify any device policies that require password reentry. |
| MSEntraRemoteDesktopAppConsentRequired | Admin consent is required for the Remote Desktop app in Microsoft Entra. | Have an administrator grant consent for the Remote Desktop app in Microsoft Entra. Learn more in Steps to enable Microsoft Entra authentication for RDP. |
| NoCandidateMachine | No candidate machine matches the execution criteria. | Verify the machine is online and is connected by validating the status on the Power Automate machine page. |
| NoListenerConnected | No machine listener is connected. | Verify the machine is online and is connected by validating the status on the Power Automate machine page. |
| PasswordExpired | The account password has expired. | Reset the account password and update the connection credentials. |
| RdpPermissionNotGranted | The account lacks permission to establish a Remote Desktop session. | Grant the account membership to the Remote Desktop Users group on the target machine. |
| RemoteDesktopAuthFailedWithMfaRequired | Remote Desktop authentication requires MFA. | Grant an MFA exception or use certificate-based authentication. See the MFA entry in the troubleshooting table. |
| SessionHasLoggedOff | The Windows session was signed off. | Reconnect to the machine using Remote Desktop and sign out of any lingering sessions. |
| SessionHasLoggedOffWithMaxIdleTime | The session was signed off after reaching the maximum idle time. | Adjust the idle-time policy on the machine if longer sessions are required. |
| SessionNotFound | The requested session wasn't found. | Retry the action. |
| Timeout | The operation timed out. | Retry the session. |
| TooManyCheckoutsInThePeriod | Too many machine checkouts occurred in the allowed period. | Wait a few minutes and retry. Learn more in Hosted browser limitations. |
| UserHasAlreadyCheckedOutTooManyMachines | The user already has too many active machine checkouts. | Wait for existing sessions to complete, or release active sessions, then retry. Learn more in Hosted browser limitations. |
| WindowsIdentityIncorrect | The Windows identity used to sign in is incorrect. | Verify the account on the connection. |