Share via

Azure VMs and disabling NLA on domain level.

Wtorkiewicz, Pawel 26 Reputation points
2021-02-11T08:42:21.303+00:00

Hello Team,

I'd like to ask if NLA is required for VMs in Azure? We want to disable it by using Group Policy Objects (GPOs).

Thanks!

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,242 questions

6 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Nelson Giovanni Orellana Cortez 1 Reputation point
    2021-07-01T22:32:07.717+00:00

    Good afternoon, I have some client machines that I stuck to the domain controller server, there are three, but to generate the first policy, the 3 were disconnected from the RDP and do not let me enter, only with the administrator user to have stuck to the AD start. tells me that the LNA does not let me and I did everything qu qu you explain and does not let me enter with the domain administrator user or password, only with the original, although they are still in the domain.

    0 comments
  2. Wtorkiewicz, Pawel 26 Reputation points
    2021-03-02T10:12:35.873+00:00

    @Sumarigo-MSFT may I ask for the confirmation if above assumption is correct and we can safely disable the settings described in the reference article?

    0 comments
  3. Wtorkiewicz, Pawel 26 Reputation points
    2021-02-16T22:24:27.71+00:00

    Hello @Sumarigo-MSFT thanks for the answer.

    Can you explain it a bit more as it's not clear enough for me yet. I know it's technically possible but we wonder if this will not break the Azure VMs - I'm talking about core VMs requirements not some specific application which might running on it.

    So we just need to know if below settings are not some kind of prerequisites to allow Azure VMs running/reporting/etc.

    We plan to disable the NLA and NCSI active/passive probes as described in the reference article:
    https://learn.microsoft.com/en-us/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network

  4. Sumarigo-MSFT 43,911 Reputation points Microsoft Employee
    2021-02-15T10:56:02.533+00:00

    @Wtorkiewicz, Pawel Firstly, apologies for the delay in responding here and any inconvenience this issue may have caused.
    Technically it would be possible but I don't think that would be recommend keeping security in aspects

    • Disabling via GPO is possible

    Appreciate your time and patience!

    Hope this helps!

    Kindly let us know if the above helps or you need further assistance on this issue.

    --------------------------------------------------------------------------------------------------------------------------------------

    Please don’t forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

    0 comments
  5. Wtorkiewicz, Pawel 26 Reputation points
    2021-02-15T10:35:39.317+00:00

    Hello,

    Still following up. Can you confirm if above settings can be disabled and should not have any impact for Azure VMs?

    0 comments