question

EvgeniyLotosh-9419 avatar image
0 Votes"
EvgeniyLotosh-9419 asked JamesHamil-MSFT answered

How to log in to a Windows server in Azure using an AAD account?

I've created a new Win2022 server in Azure. I can log in using a locally created admin account. Now I need to log in using an account in my Azure AD (the default instalce). AAD integration option was enabled in the creation wizard.

The user account has been assigned Virtual Machine Administrator Login role. However, I can't log in using these credentials. They don't work. The Security log in Windows contains "unknown user name or bad password" event.

I also can't join the server to my AAD domain. The domain name simply can't be resolved.

What should I do to access the server with AAD credentials?

azure-active-directorywindows-server-2019
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JamesHamil-MSFT avatar image
0 Votes"
JamesHamil-MSFT answered

Hi @EvgeniyLotosh-9419 , have you followed this document to configure this? I assume you have as you mentioned you're having issues with the domain. Did you get any other error codes?


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EvgeniyLotosh-9419 avatar image
0 Votes"
EvgeniyLotosh-9419 answered

@JamesHamil-MSFT

I saw the dociment you mentioned. However, it doesn't contain any specific steps for integrating a VM with Azure. It's just a general description of VM creation.

The problem is, the AAD domain name can't be resolved. I can't figure out how to configure the local DNS setings to make them point to a DNS server that can resolve the name. Properties of my AAD domains (both the default one and another I created manually) don't contain any hints.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EvgeniyLotosh-9419 avatar image
0 Votes"
EvgeniyLotosh-9419 answered

One more link related to the subject: https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Everything was done as described, signing in with AAD accounts is still impossible.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EvgeniyLotosh-9419 avatar image
0 Votes"
EvgeniyLotosh-9419 answered

OK, here seems to be the final answer. I was trying to sign in to the AAD-joined VM over RDP from my home computer (that is not joined to anything). This turned to be the root cause for the issue. When I created another Azure VM joined to the same AAD tenant, I was able to log in without any issue (UPN + password).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.