Not able to access AD Server through Bastion using On-Prem User Credentials.

Siya Kumari 506

Hello experts!

I have configured Azure Bastion in my environment, and removed public IPs of the VM.

When I am trying to access the VM using Azure User creds, I can access it, and when I am trying to access it using On-prem user creds it shows me an error. MicrosoftTeams-image (27)

Again I am trying to access it with Azure User then also it is showing me the same error.

If I have to access it again, I have to close all the windows of Azure Portal and then I can access it.

I am confused as to why this is happening.

Please let me know the solution to it, If I want to access the AD server using On-Prem Credentials, then how can I do this?

GitaraniSharma-MSFT 47,686 Reputation points Microsoft Employee

2023-12-27T13:22:28.4666667+00:00

Hello @Siya Kumari ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you are unable to access a VM through Azure Bastion using on-prem user credentials.

Azure Bastion supports domain-joined VM sign-in for username-password based domain sign-in only. When specifying the domain credentials in the Azure portal, use the UPN (username@domain) format instead of domain\username format to sign in. This is supported for domain-joined or hybrid-joined (both domain-joined and Microsoft Entra joined) virtual machines. It isn't supported for Microsoft Entra joined-only virtual machines.

Refer: https://learn.microsoft.com/en-us/azure/bastion/troubleshoot#domain

Could you please confirm if your VM is domain-joined or hybrid-joined?

If yes, please use the UPN (username@domain) format instead of domain\username format to sign in.

Regards,

Gita
GitaraniSharma-MSFT 47,686 Reputation points Microsoft Employee

2024-01-02T13:02:30.5933333+00:00

@Siya Kumari , could you please provide an update on this post and share the requested detail for further discussion?
Siya Kumari 506 Reputation points

2024-01-10T11:10:13.9166667+00:00

@GitaraniSharma-MSFT , my VM is domain joined. Thanks for your response.
GitaraniSharma-MSFT 47,686 Reputation points Microsoft Employee

2024-01-10T12:57:28.6+00:00

@Siya Kumari , did you try to use the UPN (username@domain) format instead of domain\username format to sign in?

1 answer

Sonny Gillissen 3,271 Reputation points

2024-01-08T12:14:50.3066667+00:00

Hi Siya Kumari ,

Thank you for reaching out on Microsoft Q&A!

What happens when you format the username as follows:

.\username

Together with your password? The .\ acts like a domain logon but the dot points to the local computer. Maybe this works :-)

Please click “Accept answer” if you find this helpful. Feel free to drop additional queries in the comments below!

Kind regards,

Sonny
Please sign in to rate this answer.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Sign in to comment