Azure VM: the user account used to connect to remote PC did not work

Question

I have an Azure Virtual Machine connected with Azure Active Directory. A user from this AD is added to this machine as an admin. Other people can successfully RDP to the machine with this user's credential, but I get error saying "The user account used to connect to remote PC did not work. Try again". Well, I am trying the whole day. Does anyone know what can cause this?

The fun fact is, I can RDP to the machine using the local admin, but again it fails with AD user.

I tried connecting with Microsoft Remote Desktop for Mac, mstsc for Windows and with Remote Desktop Connection Manager. The same result everywhere.

I tried different usernames format:

• [email protected] - other people can successfully login using this format
• AzureAD\[email protected] - for windows client getting the same error, for Microsoft Remote Desktop for Mac getting "Your session ended because of an error. If this keeps happening, contact your network administrator for assistance. Error code: 0x807"
• AzureAD\AlexSikilinda mstsc error - "Remote machine is AAD joined. If you are signing in to your work account, try using work email instead", Mac - "Your session ended because of an error. If this keeps happening, contact your network administrator for assistance. Error code: 0x807"

Microsoft Remote Desktop for Mac version 10.2.3 (1343) Windows 10 version 16299 (also tried with 1803 on another machine, the same result).

Answer 1

I also came across the same error for the win10 that is AAD join, and I tried the following way to solve this:

1. Change VM Remote desktop settings same as the picture

2. Create a new RDP config file Open mstsc.exe, click on Show Options and then click Save As(give it a new name such as AzureAD_RDP, save it somewhere easy to find).

3. Open the saved file using Notepad. Verify that the following two lines are present, if not, add them, and save.

   enablecredsspsupport:i:0

   authentication level:i:2

4. RDP to the target VM

Open the RDP config file that you just edited, enter the IP address of the VM, do not enter any username, and then connect.

Here you could use AzureAD\UPN or username to log in.