Unable to login with Entra ID in Azure AD joined VM Windows Server

Rama Prasad 25 Reputation points
2024-01-16T16:05:02.5233333+00:00

Unable to login with Entra ID, which was created with custom domain, to Azure AD joined VM Windows Server. Could successfully join VM to Azure AD with Entra Id credentials. But when trying to login with the same ID getting Login Attempt Fail error. Made user group as Virtual Machine Login User and gave remote login permissions in VM. When adding the user to the list of remote users it asked for Entra Id credentials and it worked as well. But from RDP unable to login with the same credentials.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} vote

Accepted answer
  1. Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator
    2024-01-17T12:59:07.95+00:00

    @Rama Prasad

    Thank you for posting this in Microsoft Q&A.

    If anyone is trying to take RDP to the device they will have to use the username in the format of ******@domain.com of user account or you can also the format AzureAD******@domain.com. But there are some prerequisites that needs to be met to take RDP on to the device which is Azure AD joined.

    • Both devices (local and remote) must be running a supported version of Windows.
    • Remote device must have the Connect to and use this PC from another device using the Remote Desktop app option selected under Settings > System > Remote Desktop.
      • It's recommended to select Require devices to use Network Level Authentication to connect option.
      • If the user who joined the device to Microsoft Entra ID is the only one who is going to connect remotely, no other configuration is needed. To allow more users or groups to connect to the device remotely, you must add users to the Remote Desktop Users group on the remote device.
      • Ensure Remote Credential Guard is turned off on the device you're using to connect to the remote device.
      You can follow below article if you are looking to connect using Microsoft Entra authentication. https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc#connect-with-microsoft-entra-authentication Let me know if you have any further questions. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.