This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(64, 79%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3END%3C/text%3E%3C/svg%3E)
Hi all,
I have a "SQL Server on Azure VM" on Azure, which is simply a Windows Server with preinstalled SQL server as far as I can tell.
I have created an "Azure AD Domain Services" domain, and joined the server successfully there, so user management is on Azure AD.
Now I'm trying to connect to the SQL server directly through the internet, by using an account on this directory. I can successfully logon to the server using an SQL user, so firewalls etc are configured correctly. I can also logon to the SQL instance locally from the server, so the permissions are also set properly.
But when trying to connect by using "Active Directory - Password" on either the SQL Management studio, or my .net application, I get error "Login failed for user ". (Microsoft SQL Server, error: 18456)
Please note that the above scenario works properly if I use either "Azure SQL Database" or "Azure SQL Managed Instance", after adding the user as an "Active Directory admin" in the Azure portal.
Am I missing something on the configuration of Azure AD? Or is this scenario just not supported?
Thanks in advance
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 77%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
This is an unsupported scenario . However theoretically it should work . There may be some custom configuration on the SQL side for logins which may allow only admins. If you try to use Active Directory - Password , the connection should be within the local network to the Azure AD domain services as it will use legacy auth, Kerberos which may not be possile unless port 88 , 464 , 135 and others are open from your SQL VM to the Azure AD domain services instance.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 49%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERC%3C/text%3E%3C/svg%3E)
Hi,
Were you able to find the cause here ? i have the same issue
Regards,
Rohith
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 78%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Hi
we are also looking for a solution to this scenario.
Regards
Masood