1,960 questions
Hello,
Please try with the legacy login with DOMAIN\Username format.
Suppose, your UPN is manu@cloudcompute.onmicrosoft.com, use: cloudcompute.onmicrosoft.com\manu as the username
Thanks,
Manu
Azure DS Join: Account is locked out
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 36%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
Jeremy Taylor
26
Reputation points
So I followed all the steps in the article here: https://learn.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm
I'm trying to join my new VM to the Azure DS domain and I keep getting "The referenced account is currently locked out and may nor be logged on to."
I've tried joining using every member of AAD DC Administrators using their UPN and password and the result is the same. I've even tried SAMAccountName format and that gives the same result.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 7.000000000000001%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Joseph Morin 26 Reputation points2020-05-12T19:23:38.117+00:00 Are you cloud-only? If you are, you must have the users reset their passwords before they can be used.
For cloud-only user accounts, users must change their passwords before they can use Azure AD DS. This password change process causes the password hashes for Kerberos and NTLM authentication to be generated and stored in Azure AD. The account isn't synchronized from Azure AD to Azure AD DS until the password is changed.
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 89%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jeremyahagan 1 Reputation point2021-04-08T01:45:47.73+00:00 This answer worked for me.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(214.4, 50%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECP%3C/text%3E%3C/svg%3E)
Chris Parker 21 Reputation points2021-06-13T19:09:12.82+00:00 Was it only changing the password that worked for you?
I'm having this issue as well. I am unable to join my vm to azure ad. -
jeremyahagan 1 Reputation point
2021-06-14T00:52:23.937+00:00 Yes Chris, but it took some time to sync too. I think I changed the passwords and tried the following day because I was just testing it out.
Sign in to comment
2 answers
Sort by: Most helpful
-
Manu Philip 16,971 Reputation points MVP2020-05-12T05:21:12.147+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 98%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
Ryan Leighton 1 Reputation point2021-11-22T16:41:48.983+00:00 Changed password as per docs and no joy. Tried this "legacy login" and worked.
Sign in to comment -
-
Erin Greenlee 26 Reputation points Microsoft Employee2020-05-11T22:38:15.31+00:00 Hi Jeremy,
Have you seen this doc? https://learn.microsoft.com/azure/active-directory-domain-services/troubleshoot-account-lockout
This may be helpful in your scenario.We have gotten quite a good amount of feedback on this, and we do understand that account lockout experience needs to be improved in the future.
Best,
Erin Greenlee
Program Manager