Join VM to Entra ID DS with regular user

Question

Hello everyone,

we join ubuntu workstations to entra id ds manually using a global admin account. We'd like to automate this using an account with lesser privileges.

According to MS documentation, joining to entra id ds should be possible for any user that is part of entra id ds. When we try this, we get authentication errors. The same machines can be joined using a global admin account.

How can a computer be joined to entra id ds with an account that's not global admin?

Thank you very much!

Answer

Hello PhantomCordShinobi,

Thank you for posting your query in the Microsoft Q&A Community.

There are a few bits to check when encountering authentication issues while trying to domain join machines to Entra ID managed domain.

Make sure this is not a guest user (external account) invited to the tenant. Only users created within the Entra ID tenant or part of the managed domain should be used to complete this process
Check that you have enabled password synchronization to your managed domain. Without this configuration step, the required password hashes won't be present in the managed domain to correctly authenticate your sign-in attempt.

Follow the link to get more information about how to troubleshoot authentication-related issues in a managed domain.

https://video2.skills-academy.com/en-us/entra/identity/domain-services/join-windows-vm#troubleshoot-domain-join-issues

Let me know if further assistance is needed.

Babafemi

Share via

Join VM to Entra ID DS with regular user

1 answer