AAD Login Extension AzureADJoinned: NO

Question

I'm just trying to use the AAD login for windows extension on a pre-existing VM which I enabled after pre-existing through azure cli.

Which the extension has provisioned sucessfully.

The problem i'm facing is that dsregcmd /status is showing that my VM still isn't AzureADJoined.

from CommandExecution logs I can see that DSrMDAzureHelper fails when trying to reach "169.254.169.254/..../2018-02-01"

From my understanding AAD login for windows should just join a subscriptions Azure AD once the extension is enabled.

Anyone know what could causing this issue?

Answer 1

You should have enabled Azure AD login when the VM was created.
It might be possible to get away with this by enabling System Managed Identity in the VM. You need to do that before you install the AAD extension.

https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Hope this helps!