Windows app (formerly Remote Desktop) for macOS unable to connect to Windows 11 Entra ID joined device

Question

I have a VM with Windows 11 joined in Entra ID.

From Windows I can connect to the machine using Remote Desktop and the IP address and login with the local account (can connect with EntraID username in any way: AzureAD\Username, .\AzureAD\Username, Username) with both combinations of just username and ******@domain.com - with no success).

From Windows I can connect to the machine using Remote Desktop and the NETBIOS machine name with the “Use a web account to sign in to the remote computer” checked with my Entra ID.

From macOS I can connect to the machine using the Windows app and the IP address with the local account.

From macOS I cannot connect in any way to the machine using my Entra ID. Tried with the local IP address - cant login with the EntraID credentials. Tried with NETBIOS name, unable to connect at all:

If I try to connect with the (local) IP address using a modified .rdp file with

enablerdsaadauth:i:1

targetisaadjoined:i:1

I get to the microsoft login screen, but get this error:

Question: I would like to connect to that machine through iOS/ macOS Remote Desktop app and the user’s EntraID. Anyone managed to achieve this?

Answer 1

This feature is not mentioned anywhere in any of the MacOS Windows App but you can easily download the RDP file from the Azure portal or you create it yourself with the following configuration:

full address:s:<ipaddress>
prompt for credentials:i:1
administrative session:i:1
enablerdsaadauth:i:1
targetisaadjoined:i:1

Replace <ipaddress> with the target FQDN or IP.

After that save the file as .rdp and just open it via the MacOS Windows App, it will trigger the Entra ID Web-Login.
Hope that helps.

Thanks,
Seb

Answer 2

Hello,

You can check your firewall or vpn , I believe there may be something wrong with network communication.

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

At the end i installed windows 10 and disabled network level authentication. Hope ms will extend support 😆

for anyone still looking for an answer;

https://rublon.com/blog/how-to-rdp-into-azure-ad-joined-vm/

Answer 4

For anyone still looking for an answer:

https://rublon.com/blog/how-to-rdp-into-azure-ad-joined-vm/

At the end i installed windows 10 and disabled NLA.

Answer 5

For anybody still looking for the answer, I was able to solve this by using the server name instead of the IP address in the RDP file.

full address:s:MYSERVER:3389 
prompt for credentials:i:1 
administrative session:i:1
username:s:******@myemailaddress.com
enablerdsaadauth:i:1
targetisaadjoined:i:1

I had to add the server name to my hosts file so it would resolve to the proper IP address, but now it works like a charm.