question

AnjaDyna-6986 avatar image
0 Votes"
AnjaDyna-6986 asked sikumars commented

Login with Azure AD in an Azure VM after deploying it ?

I created an Azure VM using Windows 10 Enterprise 21H1 image.
While creating, I left this option unchecked in Management section:

106818-image.png

After deploying the VM, I logged into it with the administrator username and password as usual.

Now, I bought a Microsoft 365 F3 license, created an Azure AD user, and assigned the F3 license to the user.

Can i login to the VM with that AAD user ( Even if i didn't checked the Login with Azure AD option while creation ?

Is joining the VM to Azure AD (via the Account settings screen of Windows 10) is enough to do that?

azure-active-directoryazure-virtual-machines
image.png (17.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

sikumars avatar image
2 Votes"
sikumars answered sikumars commented

Hello @AnjaDyna-6986 ,

Yes, users can login to the VM (or over RDP) using an organizational Azure AD account when VMs are Azure AD joined (via the Account settings screen of Windows 10) even if you didn't checked the Login with Azure AD option while VM creation.

By this way users experience all AAD SSO benefits but administrator/user have to setup manually by going to account setting from Windows 10/2019 to join devices to Azure AD whereas Login with Azure AD feature would automatically take care of all configuration needed for users Signin with the help of AADLoginForWindows extension during VM deployment without having administrator to setup manually.

In addition to that you experience additional management features such as Azure role-based access control (Azure RBAC) policy, specify who can login to a VM as a regular user or with administrator privileges. Two Azure roles are used to authorize VM login (Virtual Machine Administrator Login / Virtual Machine User Login) when you use "Login with Azure AD" feature .

To learn more, refer :https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Hope this helps.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @sikumars-msft ,

Thank you so much for the answer.

I followed the steps mentioned in the link you provided to use an AAD user to login to the VM.

But the login failed with an error.
The same error is documented here in troubleshooting section : https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows#unauthorized-client

That documentation was somewhat confusing and didn't helped in fixing the issue.

Login with the AAD user succeeded after following the steps mentioned in this article : https://charbelnemnom.com/log-in-with-rdp-to-a-windows-azure-vm-using-azure-ad/ .

But the problem is, as my AAD user have an Microsoft 365 F3 license assigned, after AAD joining the device and login with that account, Windows 10 Enterprise should be activated now. But that is not happening. Can i avoid these issues if i check the Login with Azure AD option while VM creation?

0 Votes 0 ·

I had tested this scenario and didn't find any issue with windows license activation.

In most scenarios, activation of Azure VMs happens automatically, licenses for Windows 10 Enterprise and Education are checked based on Azure Active Directory (Azure AD) credentials. For more information, refer :

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-activation-problems#understanding-azure-kms-endpoints-for-windows-product-activation-of-azure-virtual-machines
https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

If non of this help, please send me an email at AzCommunity@microsoft.com, include your subscription ID&Tenant ID, and I will gladly open a free support case for you.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

1 Vote 1 ·

@sikumars-msft

Is it okay that i followed the steps mentioned in this article? :https://charbelnemnom.com/log-in-with-rdp-to-a-windows-azure-vm-using-azure-ad/ ?

0 Votes 0 ·
Show more comments