Login with Azure AD in an Azure VM after deploying it ?

Question

I created an Azure VM using Windows 10 Enterprise 21H1 image.
While creating, I left this option unchecked in Management section:

After deploying the VM, I logged into it with the administrator username and password as usual.

Now, I bought a Microsoft 365 F3 license, created an Azure AD user, and assigned the F3 license to the user.

Can i login to the VM with that AAD user ( Even if i didn't checked the Login with Azure AD option while creation ?

Is joining the VM to Azure AD (via the Account settings screen of Windows 10) is enough to do that?

Answer 1

Hello @Anja Dyna ,

Yes, users can login to the VM (or over RDP) using an organizational Azure AD account when VMs are Azure AD joined (via the Account settings screen of Windows 10) even if you didn't checked the Login with Azure AD option while VM creation.

By this way users experience all AAD SSO benefits but administrator/user have to setup manually by going to account setting from Windows 10/2019 to join devices to Azure AD whereas Login with Azure AD feature would automatically take care of all configuration needed for users Signin with the help of AADLoginForWindows extension during VM deployment without having administrator to setup manually.

In addition to that you experience additional management features such as Azure role-based access control (Azure RBAC) policy, specify who can login to a VM as a regular user or with administrator privileges. Two Azure roles are used to authorize VM login (Virtual Machine Administrator Login / Virtual Machine User Login) when you use "Login with Azure AD" feature .

To learn more, refer :https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Hope this helps.

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.