Azure Entra Joined VM single user login failure due to Application consent not prompting

Question

We have a single user getting the following error when trying to log in to a single Virtual machine in azure. Other users are able to log in to the Virtual Machine fine and the user that has this error can log in to other machines. On this singular Virtual Machine the user does not get prompted to approve the Application and the connection gets automatically denied with the following error in Sign in logs:

The user or administrator has not consented connecting to the target-device: '{identifier}'. Send an interactive authorization request for this user and target-machine.

Answer 1

Hello,

Thank you for posting in Microsoft Q&A.

Based on the description, I understand your question is related to Azure Entra Joined VM single user login failure due to Application consent not prompting.

Check the user has the necessary permissions to access the VM. The user should have the Virtual Machine User Login role assigned to the VM or the resource group. Check user consent is enabled for the application. Sometimes, user consent might be disabled at the tenant level, which can prevent the consent prompt from appearing.

Go to Azure Active Directory > Enterprise applications. Select the application in question. Under Permissions, click Grant admin consent for [Your Organization].

Check if there are any Conditional Access policies that might be affecting the login process. Ensure that the policies are configured to allow the necessary permissions for the application.

Reference links:

https://learn.microsoft.com/en-us/troubleshoot/entra/entra-id/app-integration/troubleshoot-consent-issues

https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-desktop/troubleshoot-azure-ad-connections

Have a nice day.

Best Regards,

Molly

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it