Azure Virtual Desktop with Azure AD Login

[Stefan Kießig]

Hey,
I am using Azure Virtual Desktop with Azure AD Login. I was able to create a hostpool as well as a session host. I can log in to the hostpool with my AAD credentials. But on the session host it only works with the local admin user.

The session host is Azure AD gejoind.

AzureAdJoined : YES
EnterpriseJoined : NO
DomainJoined : NO
Device Name : SGVDI-0

How can I log in to the session host with my Azure AD credentials?

[#2]

Hi @Stefan Kießig,
What error do you get?
Did you grant the users the Virtual Machine User role?

[#3]

@Johan Vanneuville 

Sorry for my late reply.

The problem is still there. I become no error. 

It shows in the login windows "The logon attemd faild" in red.

Regrards 

Stefan

[#4]

Hi @Stefan Kießig , any solution you found for this? I am facing same issue.

[#5]

@sreeja8 

As above, did you assign the Azure AD user to the Session Host you're trying to connect to?

• "Assign your users the Virtual Machine User Login role so they can sign in to the VMs."

https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm#assign-user-access-...

The local client needs to be one of these also:

• The local PC is Azure AD-joined to the same Azure AD tenant as the session host
• The local PC is hybrid Azure AD-joined to the same Azure AD tenant as the session host
• The local PC is running Windows 10, version 2004 and later, and is Azure AD registered to the same Azure AD tenant as the session host
• To enable access from Windows devices not joined to Azure AD, add targetisaadjoined:i:1 as a custom RDP property to the host pool. These connections are restricted to entering user name and password credentials when signing in to the session host.

https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm#connect-using-the-w...

I also found this useful as well in genera: https://docs.microsoft.com/en-us/azure/architecture/example-scenario/wvd/azure-virtual-desktop-azure...

[#6]

@ahart3 

yes. 

My challenge was the MFA. Since the login on a VM does not support MFA. So I turned off the login with MFA for Azure VM connected with AAD.

Regards

Stefan