Unable to RDP to Azure Virtual Desktop VM and Log In via Azure AD (Not AADDS)

Question

I have recently setup a new host pool for some Azure Virtual Desktop VMs. I had another host pool setup that had some AVD VMs that I setup to domain join using AADDS. The former host pool worked fine as far as allowing Azure AD users to login; however, I could not get any VMs in the old pool connected to Intune. When I setup the new pool and VMs, under "Domain to join" I chose "Azure Active Directory" and set "Enroll VM with Intune" to "Yes" so that they were automatically enrolled in Intune. However, I have been unable to log into the VMs as the Azure AD users (only the local admin that was set during creation). More technical details below:

• I have explicitly assigned each user that I want to log into the VMs.
• Virtual Machine User Login and Virtual Machine Administrator Login has been granted for users
• AADLoginForWindows extension is installed
• RDP Properties changed to include under Advanced ";targetisaadjoined:i:1"
• Security Defaults temporarily disabled but didn't help
• Both belong resource group and subnet of another host group that was able to authenticate using AADDS

Answer 1

Hello @Bill Ferring !

If you follow this

https://www.cloudblogger.eu/2023/01/13/azure-vm-azure-ad-join/

There is a part :

net localgroup "remote desktop users" /add "AzureAD\myuser@something.net"

WHere you add the Users into the RDP Users Group

also the NLA probably needs deactivation

Please try these 2 details

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hello @Bill Ferring !

Welcome to Microsoft QnA!

As we can read

Users must be in the Azure Virtual Desktop Desktop application group to sign in to VMs. For Azure AD join, the same users and groups that are in the Desktop application group must also be added to the Virtual Machine User Login RBAC role. This role isn't an Azure Virtual Desktop role, but an Azure role with Log in to Virtual Machine DataAction permission.

Have you followed this :

https://learn.microsoft.com/en-us/azure/architecture/example-scenario/wvd/azure-virtual-desktop-azure-active-directory-join

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards