How to log in to a Windows server in Azure using an AAD account?

Evgeny Lotosh 161 Reputation points
2022-04-07T14:24:08.373+00:00

I've created a new Win2022 server in Azure. I can log in using a locally created admin account. Now I need to log in using an account in my Azure AD (the default instalce). AAD integration option was enabled in the creation wizard.

The user account has been assigned Virtual Machine Administrator Login role. However, I can't log in using these credentials. They don't work. The Security log in Windows contains "unknown user name or bad password" event.

I also can't join the server to my AAD domain. The domain name simply can't be resolved.

What should I do to access the server with AAD credentials?

Microsoft Security Microsoft Entra Microsoft Entra ID
Windows for business Windows Server User experience Other
{count} votes

4 answers

Sort by: Most helpful
  1. Evgeny Lotosh 161 Reputation points
    2022-04-11T19:11:34.23+00:00

    One more link related to the subject: https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

    Everything was done as described, signing in with AAD accounts is still impossible.

    1 person found this answer helpful.
    0 comments No comments

  2. Evgeny Lotosh 161 Reputation points
    2022-04-12T16:37:16.493+00:00

    OK, here seems to be the final answer. I was trying to sign in to the AAD-joined VM over RDP from my home computer (that is not joined to anything). This turned to be the root cause for the issue. When I created another Azure VM joined to the same AAD tenant, I was able to log in without any issue (UPN + password).

    1 person found this answer helpful.
    0 comments No comments

  3. James Hamil 27,211 Reputation points Microsoft Employee Moderator
    2022-04-07T18:34:30.247+00:00

    Hi @Evgeny Lotosh , have you followed this document to configure this? I assume you have as you mentioned you're having issues with the domain. Did you get any other error codes?

    0 comments No comments

  4. Evgeny Lotosh 161 Reputation points
    2022-04-11T04:25:39.503+00:00

    @James Hamil

    I saw the dociment you mentioned. However, it doesn't contain any specific steps for integrating a VM with Azure. It's just a general description of VM creation.

    The problem is, the AAD domain name can't be resolved. I can't figure out how to configure the local DNS setings to make them point to a DNS server that can resolve the name. Properties of my AAD domains (both the default one and another I created manually) don't contain any hints.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.