azure virtual desktop; Sign in failed. Please check your username and password and try again.

Question

Have deployed aad-joined avd. Getting below error. Any help to fix this issue?

Answer 1

Hi,

Have you set the relevant permissions over the VM? If its AAD joined you'll need one of the following roles assigned to either the VM or containing Resource Group.

• Virtual Machine Administrator Login
• Virtual Machine User Login

This will allow login rights to the required user(s).

James

Answer 2

Hi @Anonymous and @Lorne Bonnell ,

I had a simular issue. Because you are using the web client you also need to edit the rdp properties of the hostpool.

1. Select the hostpool
2. Select Settings -> RDP Properties
3. Select Advanced
4. Add to the properties ;targetisaadjoined:i:1

For more information check https://learn.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm#deploy-azure-ad-joined-vms

Connect using the other clients
To access Azure AD-joined VMs using the web, Android, macOS and iOS clients, you must add targetisaadjoined:i:1 as a custom RDP property to the host pool. These connections are restricted to entering user name and password credentials when signing in to the session host.

Best regards, Aad

Answer 3

I have the same issue I have done both steps above, if I use the web client I can eventually connect but I have to put the domain suffix in fro of the user name before it works e.g. contoso\myuser@contso.onmicrosoft.com

I cannot get the Mac client to work either, I see the published desktop and app but always says password is incorrect.

Answer 4

Hello @Anonymous ,

Thank you for reaching out to the Microsoft Q&A platform. Happy to answer your question.

I understand you are getting the sign in failure when trying to logon to an AAD joined AVD virtual machine with error "Sign in failed. Please check your username and password and try again

I can't sign in, even though I'm using the right credentials
If you can't sign in and keep receiving an error message that says your credentials are incorrect, first make sure you're using the right credentials. If you keep seeing error messages, ask yourself the following questions:

Does your Conditional Access policy exclude multi-factor authentication requirements for the Azure Windows VM sign-in cloud application?
Have you assigned the Virtual Machine User Login role-based access control (RBAC) permission to the VM or resource group for each user?
If you answered "no" to either of these questions, follow the instructions in Enforce Azure Active Directory Multi-Factor Authentication for Azure Virtual Desktop using Conditional Access to reconfigure your multi-factor authentication.

Note:
VM sign-ins don't support per-user enabled or enforced Azure AD Multi-Factor Authentication. If you try to sign in with multi-factor authentication on a VM, you won't be able to sign in and will receive an error message.

For detailed guidance on connections to Azure AD-joined VMs please refer to the following Microsoft AVD document troubleshoot-azure-ad-connections

--please don't forget to upvote and accept as answer if the reply is helpful--

Answer 5

Consider disabling Security Defaults in Azure AD. If you created users from Office 365 admin portal then these users may not be able to login until you disable the Security Defaults.