This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I am practising for the first time to setup AVD solution and I decided not to setup AD DS at all. So I created manually all components necassarry in Azure and host session pool has 2 VMs created, registered to AzureAD and in Intune successfully. Users are assigned via AAD group to use these VMs. User can login to the web console, see the available resource, but when selecting, I get this:
I have ensured that password for user is correct. MFA is also been disabled as a test.
EDIT: If I try to login with AVD client (msi installation), I get little different error: "your account is configured to prevent you from using this device"
An Azure service that is used to provision Windows and Linux virtual machines.
Got it, opened IAM from AVD resource group and provided virtual machine user rights: https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows
This is not over yet :D
Conditional Access is applied for AVD, but MFA is not required
User is able to connect via RDP client, but not web
In AAD sign in, there is no logs for web client attempt, but for RDP client logs are seeing and successfull.
Still fighting with this.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 57.00000000000001%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Did you give Virtual Machine User Login?
You must also configure rdp proprties on you hostpool targetisaadjoined:i:1
Look on this https://learn.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm
Yes it was targetisaadjoined:i:1
You must exclude Mfa from the conditional access and work on IAM. Look on this:
Trying this again, is Azure AD join only still buggy? I was thinking to create Azure support ticket, if RDP will work, but web access not.
Hi,
Is this an standalone Azure VM or is it part of a Azure Virtual Desktop hostpool?
Justin
part of hostpool
I had this same sort of error a while ago with Azure AD joined machines. For me the fix was to create a new user account and logging in instead of the global administrator account. I have never found out why it did not work with my global administrator, IAM/role assignments were good.
@JustinVers-2058 after reading more elsewhere around this, I decided to create AD DS. It seems Azure AD join only solution is not yet ready for AVD.