Azure Windows Virtual Desktop Domain Join Problem

Question

I have an on prem AD synced up to an azure AD using Azure AD Connect and hybrid Domain Join is configured. When provision the WVD hostpool I get a conflict at the join domain with this error message:

{
"status": "Failed",
"error": {
"code": "VMExtensionProvisioningError",
"message": "VM has reported a failure when processing extension 'joindomain'. Error message: \"Exception(s) occured while joining Domain 'completecontact.net'\"\r\n\r\nMore information on troubleshooting is available at https://aka.ms/vmextensionwindowstroubleshoot "
}
}

Based on my research into the the issue my VM isn't finding the domain but It's not clear if I can just configure a DNS in the azure AD or do I need to set up a VPN between azure the on prem?

Thanks in advance,
Joe Miller

Answer 1

Hi @Joseph Miller ,

the solution depends on your environment:

If you have a AD Domain Controller running in Azure you have to make sure:

• The AD Domain Controller is reachable in the Azure Network from your WVD Host VM (network, peering, routing)
• The AD Domain Controller FQDN (AD Domain Name) needs the be resolved by the WVD Host VM via DNS during the deployment process (working DNS name resolution is required)

If you don't have a AD Domain Controller running in Azure but an on-premises AD DC:

• You have to make sure the on-premises AD Domain Controller is reachable by the WVD Host VM as well.
• Typically in this scenario is a VPN Gateway with a up and running Site-To-Site connection.
• It's the same with the DNS name resolution. The WVD Host VM must be able to resolve the AD domain name and the FQDN of the on-premises AD DC

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Helped me.