Forum Discussion
Nikonline
Jul 15, 2021Copper Contributor
Public Preview - Azure AD & Intune join for AVD - Session host unavailable
Hi All - I am using a public preview feature on Azure Virtual Desktop to join AAD and Intune (Pls see below article), although the VM was AAD registered and Intune enrolled, the session host was unav...
Johan_Vanneuville
Jul 19, 2021Iron Contributor
Is you local security policy disabled to allow cloud accounts to logon to the machine?
Nikonline
Jul 20, 2021Copper Contributor
Able to login to standalone VM using Azure AD user account (after disabling CAPs) however still unable to login to the AVD session host. After checking the connection logs i see this error
AuthenticationLogonFailedAAD (9735) - User credentials did not work. Remote machine is AAD joined. If you are signing in to your work account, try using your work email address.
23
Checked on the host VM it does have remote login permission for the user however still failing to Authenticate.
AuthenticationLogonFailedAAD (9735) - User credentials did not work. Remote machine is AAD joined. If you are signing in to your work account, try using your work email address.
23
Checked on the host VM it does have remote login permission for the user however still failing to Authenticate.
- NikonlineJul 21, 2021Copper ContributorWas able to login, good starting point https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm
Summary - Enabled Validation environment, Disabled MFA, CAPs, RDP setting changes at hostpool level.
So now that makes me feel nervous and in search of securing AVD access... phew!- SamSpronkOct 12, 2021Copper ContributorDO you have more details on this statement?
Summary - Enabled Validation environment, Disabled MFA, CAPs, RDP setting changes at hostpool level.
Understand the Validation environment, understand Disabled MFA
What are you referring to when you mention CAPs and what RDP Setting changes at hostpool level did you make?