


Mitigation | Steps I followed to fix this issue. role "Virtual Machine Administrator Login" \ $rg=$(az group show -resource-group your-resourcegroup-name -query id -o tsv) $username=$(az account show -query user.name -output tsv) Users who have this role assigned can log in to an Azure virtual machine with administrator privileges. Users who have this role assigned can log in to an Azure virtual machine with regular user privileges. Two Azure roles are used to authorize VM login.Īdd either of these IAM Roles to RBAC User Now that you’ve created the VM and enabled the appropriate extension(s), you need to configure an Azure RBAC policy to determine who can log in to the VM. This can be done at the creation of the virtual machine. Install WindowsAADLogin Extension with RBACĮnable Remote Desktop Access | 3389 on the NSG Install required extensions for the virtual machine With the local administrator account, I could remote desktop to the virtual machine but not with domain accounts. This article is intended to fix a peculiar problem encountered in remote desktop connections to Windows Server Virtual Machines on Azure. resource-group your-resourcegroup-name \Īlthough this extension can be installed at the time of creation of the virtual machine, using the following bash commandlet would still install the extension for you. Install Extensions for Azure Active Directory LoginĪz group create -name your-resourcegroup-name -location westus.It doesn’t always work and in my experience, I haven’t had much success with it up until now when I have finally figured out how to successfully rdp into a azure ad-joined vm in Azure.īelow are the steps needed to successfully achieve our objective. If you have struggled to remote desktop to a virtual machine in Azure, then it is likely to be a Windows Server or Desktop machine.Īzure uses the AzureAADLogin extension to enable the capabilities of user logins with their domain credentials. If you want to know How to Successfully RDP into Azure AD-Joined Virtual Machines, then this article is all you’d ever need.

Remote Desktop Connection does not always work with Cloud Machines.
