Enabling Azure AD Authentication for VM RDP for External Users

Dileepa 6 MVP

I need the following requirement for Virtual Machin RDP login

Must be able to use Azure AD to authenticate to Azure VM
Must be able for internal users with same domain to authenticate
Must be able to invite external users with different domains (guests) to authenticate
Must be able to complete MFA/2FA for all users to login to VMs

Is this possible to accomplish if it is please advice. Thanks!

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-02-01T23:45:53.18+00:00

Hi Dileepa ,

The NPS extension would be a good solution for your requirement. https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-nps-extension-rdg

All of the MFA is done through Azure MFA when the users connect through remote desktop.

Guest users would not be able to RDP in the setup you described because they would need to at least be added to the local machine.
Tilo 26 Reputation points

2023-12-13T18:32:34.6033333+00:00

check this: https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows

not sure if Guest user work with that tho.

Your answer