question

JeremyTaylor-8315 avatar image
JeremyTaylor-8315 asked ·

Azure DS Join: Account is locked out

So I followed all the steps in the article here: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm

I'm trying to join my new VM to the Azure DS domain and I keep getting "The referenced account is currently locked out and may nor be logged on to."

I've tried joining using every member of AAD DC Administrators using their UPN and password and the result is the same. I've even tried SAMAccountName format and that gives the same result.

azure-ad-domain-services
1 comment
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Are you cloud-only? If you are, you must have the users reset their passwords before they can be used.

For cloud-only user accounts, users must change their passwords before they can use Azure AD DS. This password change process causes the password hashes for Kerberos and NTLM authentication to be generated and stored in Azure AD. The account isn't synchronized from Azure AD to Azure AD DS until the password is changed.

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

0 Votes 0 · ·
eringreenlee avatar image
eringreenlee answered ·

Hi Jeremy,

Have you seen this doc? https://docs.microsoft.com/azure/active-directory-domain-services/troubleshoot-account-lockout
This may be helpful in your scenario.

We have gotten quite a good amount of feedback on this, and we do understand that account lockout experience needs to be improved in the future.

Best,

Erin Greenlee

Program Manager

Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ManuPhilip avatar image
ManuPhilip answered ·

Hello,
Please try with the legacy login with DOMAIN\Username format.

Suppose, your UPN is manu@cloudcompute.onmicrosoft.com, use: cloudcompute.onmicrosoft.com\manu as the username

Thanks,
Manu

Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.