Share via

RDP to Azure AD

Handian Sudianto 6,096 Reputation points
2024-01-12T02:16:49.2466667+00:00

Hello, All our workstation joined to AAD then for some scenario where we have some WFH user and the WFH user need remote to the office workstation. What format credential should be used for RDP to AAD from non joined workstation, from mobile device using official microsoft RDP client application and from Mac Apple? Trying with many different format but the credential is not work.

Microsoft Security | Microsoft Entra | Microsoft Entra ID

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 119.5K Reputation points MVP Volunteer Moderator
    2024-01-12T07:39:22.52+00:00

    For AAD joined devices, you can use the new RDP with support for AAD auth, as detailed for example here: https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc Which basically means selecting this option (as long as the requirements are met):

    User's image

  2. Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator
    2024-01-12T09:25:26.7733333+00:00

    @Handian Sudianto

    Thank you for posting this in Microsoft Q&A.

    If anyone is trying to take RDP to the device they will have to use the username in the format of ******@domain.com of user account or you can also the format AzureAD`******@domain.com`.

    But there are some prerequisites that needs to be met to take RDP on to the device which is Azure AD joined.

    • Both devices (local and remote) must be running a supported version of Windows.
    • Remote device must have the Connect to and use this PC from another device using the Remote Desktop app option selected under Settings > System > Remote Desktop.
      • It's recommended to select Require devices to use Network Level Authentication to connect option.
    • If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must add users to the Remote Desktop Users group on the remote device.
    • Ensure Remote Credential Guard is turned off on the device you're using to connect to the remote device.

    You can follow below article if you are looking to connect using Microsoft Entra authentication.

    https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc#connect-with-microsoft-entra-authentication

    Let me know if you have any further questions.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.