Unable to RDP to the server with Azure-provided DNS

Question

Hi, just to give you a quick summary, we have hub & spoke topology and we use our custom DNS as primary and secondary for our VMs residing in different vnets/ subnets. However, for one of the VMs, we need to use Azure provided DNS (168.163.129.16) as a requirement for one of the processes on this machine. Now, when we try to rdp to this machine, we are getting: The remote computer that you are trying to connect to requires Network Level Authentication but your Windows domain controller cannot be contacted to perform NLA. If you are an administrator on the remote computer, you can disable NLA by using the options on the Remote tab of the System Properties dialog box. In order to get in to this machine, we had to disable NLA temporarily. Also, we are unable to ping other machines from this VM. Can I please get some advice / suggestion as what do we need to configure to make this work , private DNS zone or anything else? Many thanks

Answer 1

Just to update, we have managed to resolve the issue by creating the DNS forward zone in our own DNS server and by adding the required records. its all working fine now.

Answer 2

@Ghulam Abbas

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this!

Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others", I'll repost your solution in case you'd like to accept the answer.

Issue:

Unable to RDP to the server with Azure-provided DNS

Hi, just to give you a quick summary, we have hub & spoke topology and we use our custom DNS as primary and secondary for our VMs residing in different vnets/ subnets. However, for one of the VMs, we need to use Azure provided DNS (168.163.129.16) as a requirement for one of the processes on this machine. Now, when we try to rdp to this machine, we are getting: The remote computer that you are trying to connect to requires Network Level Authentication but your Windows domain controller cannot be contacted to perform NLA. If you are an administrator on the remote computer, you can disable NLA by using the options on the Remote tab of the System Properties dialog box. In order to get in to this machine, we had to disable NLA temporarily. Also, we are unable to ping other machines from this VM. Can I please get some advice / suggestion as what do we need to configure to make this work , private DNS zone or anything else? Many thanks

Solution:

You've managed to resolve the issue by creating the DNS forward zone in your own DNS server and added the required records.

If I missed anything please let me know and I'd be happy to add it to my answer, or feel free to comment below with any additional information.

I hope this helps!

If you have any other questions, please let me know. Thank you again for your time and patience throughout this issue.