Azure Virtual Desktop with Azure AD Login

Question

Hey,I am using Azure Virtual Desktop with Azure AD Login. I was able to create a hostpool as well as a session host. I can log in to the hostpool with my AAD credentials. But on the session host it only works with the local admin user.The session host is Azure AD gejoind.AzureAdJoined : YESEnterpriseJoined : NODomainJoined : NODevice Name : SGVDI-0How can I log in to the session host with my Azure AD credentials?

johan_vanneuville · Answer

Hi Stefan Kießig,What error do you get?Did you grant the users the Virtual Machine User role?

stefan kießig · Answer

Johan_Vanneuville&nbsp;Sorry for my late reply.&nbsp;The problem is still there. I become no error.&nbsp;It shows in the login windows "The logon attemd faild" in red.&nbsp;Regrards&nbsp;Stefan

sreeja8 · Answer

Hi Stefan Kießig , any solution you found for this? I am facing same issue.

ahart3 · Answer

sreeja8&nbsp;&nbsp;As above, did you assign the Azure AD user to the Session Host you're trying to connect to?&nbsp;"Assign your users the Virtual Machine User Login role so they can sign in to the VMs."https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm#assign-user-access-to-host-pools&nbsp;The local client needs to be one of these also:&nbsp;The local PC is Azure AD-joined to the same Azure AD tenant as the session hostThe local PC is hybrid Azure AD-joined to the same Azure AD tenant as the session hostThe local PC is running Windows 10, version 2004 and later, and is Azure AD registered to the same Azure AD tenant as the session hostTo enable access from Windows devices not joined to Azure AD, add targetisaadjoined:i:1 as a custom RDP property to the host pool. These connections are restricted to entering user name and password credentials when signing in to the session host.https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm#connect-using-the-windows-desktop-client&nbsp;I also found this useful as well in genera: https://docs.microsoft.com/en-us/azure/architecture/example-scenario/wvd/azure-virtual-desktop-azure-active-directory-join

stefanki · Answer

ahart3&nbsp;&nbsp;yes.&nbsp;My challenge was the MFA. Since the login on a VM does not support MFA. So I turned off the login with MFA for Azure VM connected with AAD.&nbsp;RegardsStefan

Forum Discussion

Azure Virtual Desktop with Azure AD Login

Share

Resources