Forum Discussion
Nikonline
Jul 15, 2021Copper Contributor
Public Preview - Azure AD & Intune join for AVD - Session host unavailable
Hi All - I am using a public preview feature on Azure Virtual Desktop to join AAD and Intune (Pls see below article), although the VM was AAD registered and Intune enrolled, the session host was unav...
Nikonline
Jul 19, 2021Copper Contributor
Hi Johan, thanks for responding. well it did make the machine available, was able to login locally, however i am till unable to login with my AAD creds. When i checked locally i could see my AAD user account has rights to login remotely so not sure why the Authentication is failing. Does this machine need to be Azure ADDS joined (we dont have on prem AD)?
Error message -
We couldn't connect to the remote PC because your credentials did not work. The remote machine is AAD joined. If you are using your work account you must disable Network Level Authentication on the remote machine. If you are using a local account, verify your username and password.
Error code: 0x2607
Error message -
We couldn't connect to the remote PC because your credentials did not work. The remote machine is AAD joined. If you are using your work account you must disable Network Level Authentication on the remote machine. If you are using a local account, verify your username and password.
Error code: 0x2607
Johan_Vanneuville
Jul 19, 2021Iron Contributor
Did you assign the user the virtual machine user login role on the resource group?
- NikonlineJul 19, 2021Copper Contributoryes, assigned the role despite being Owner on the RG. Still the same error.
- Johan_VanneuvilleJul 19, 2021Iron ContributorIs you local security policy disabled to allow cloud accounts to logon to the machine?
- NikonlineJul 20, 2021Copper ContributorAble to login to standalone VM using Azure AD user account (after disabling CAPs) however still unable to login to the AVD session host. After checking the connection logs i see this error
AuthenticationLogonFailedAAD (9735) - User credentials did not work. Remote machine is AAD joined. If you are signing in to your work account, try using your work email address.
23
Checked on the host VM it does have remote login permission for the user however still failing to Authenticate.