RDP login to VM with MFA

Question

RDP login to VM with MFA

IT.Admin 0

Hi All,

I am facing issue to setup RDP access to Azure Platform VM machine using AzureAD credential. It blocks me from using my Entra credential to login with message of "". However, local user account on VM connection is possible. Anyone has some good experience to use MS credential to login with MFA to the machine.

Thanks

Sky

Sky Yeo 6 Reputation points

2025-11-03T10:21:30.4366667+00:00

Hi Sir, I follow your guide to add the user to the "Azure windows VM sign in". Still it fails with same errorAzureAD login Error2.jpg AzureAD login Error3.jpg.

Can you advise further.

Any possibility to provide online meeting support?

Sky

1 answer

Your answer

Sky Yeo 6 Reputation points

2025-11-03T10:21:30.4366667+00:00

Hi Sir, I follow your guide to add the user to the "Azure windows VM sign in". Still it fails with same errorAzureAD login Error2.jpg AzureAD login Error3.jpg.

Can you advise further.

Any possibility to provide online meeting support?

Sky

Answer 1

Gouse_Shaik 395

Hello @IT.Admin,

This issue may occur if MFA is enabled through Per-user MFA or if your Conditional Access policy does not exclude the Microsoft Azure Windows Virtual Machine Sign-in application. I recommend verifying how MFA is enabled on your account. If it is enabled via Per-user MFA, please disable it. If it is enforced through a Conditional Access policy, make sure the application is excluded.

If MFA is enabled through security defaults and your account has the Global Administrator role assigned, try signing in with a non-admin user to see if the issue persists.

More details can be found here: Azure AD sign-in requirements for Windows VMs

If you still face the same issue after these checks, please review the requirements on the base machine from which you are initiating the RDP connection:

Remote connections to VMs joined to Microsoft Entra ID are only allowed from Windows 10 or later PCs that are Microsoft Entra registered (minimum build 20H1), Microsoft Entra joined, or Microsoft Entra hybrid joined to the same directory as the VM.

Sky Yeo 6 Reputation points

2025-11-04T02:56:27.86+00:00

need more help on that. I cannot afford to turn off MFA per user due to security needs.
Gouse_Shaik 395 Reputation points

2025-11-04T18:45:22.8+00:00

Hello Sky Yeo, To sign in to a VM using an Entra ID account, you’ll need to disable per-user MFA, as this is by design.

To maintain security for your tenant, you can still enforce MFA using either Security Defaults or a Conditional Access Policy.

Enabling MFA for user sign-ins doesn’t require using per-user MFA specifically — the same security enforcement can be achieved more efficiently through Security Defaults or Conditional Access policies.

Share via

RDP login to VM with MFA

1 answer

Your answer