How do I fix this port issue?

Question

Answer 1

Thanks for posting your question in the Microsoft Q&A forum.

As error stated “Standard JIT policy is not configured on this virtual machine”, follow below configurations :

Navigate to your Azure VM resource in the Azure portal -> Open the “Configuration” pane -> Click the “Enable just-in-time” button.

Download the RDP file and use it to connect from your local machine. However, it seems that your local computer cannot access the VM. To resolve this:

• Add a temporary network security group (NSG) rule for your local computer’s IP address.
• The error message also indicates that port 3389 is not accessible and the Just-in-time policy is unsupported.

Remember to verify your network configurations, including NSG rules, public IP settings, and JIT policies. If you need further assistance, please let me know 🙂

Answer 2

Hello, @Hao Sun !

Why am I getting a Just In Time (JIT) access error when attempting to RDP to my VM? Does JIT VM access require a subscription?

Azure will perform some prerequisite checks when you attempt to connect to a VM using RDP. If Just In Time (JIT) access is configured for the subscription, then that will be added to the check. It's not uncommon for this to take a couple seconds and it will show as red until the verification has been completed. If you need to enable JIT, you can click on the Configure for this port link or navigate to the VM Configuration pane. @Suwarna S Kale has provided excellent instructions:

Navigate to your Azure VM resource in the Azure portal -> Open the “Configuration” pane -> Click the “Enable just-in-time” button.

JIT does require Microsoft Defender for Servers Plan 2 to be enabled on the subscription. Below you can see an example of a VM deployed on a subscription with JIT enabled and a subscription where JIT has not been enabled.

Example 1: JIT is enabled for the subscription, but the VM prerequisite configurations are not yet complete:

A few moments later the VM prerequisite configurations have completed (however JIT is still not configured, you would need to click on the link on the left):

Example 2: JIT is not enabled for the subscription (unsupported by plan):

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!