Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
Remote Desktop Entra ID
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 54%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEF%3C/text%3E%3C/svg%3E)
Erwin F
0
Reputation points
I am setting up Remote Desktop for a system to be able to connect to another system using RDP. The destination computer is on a domain say Domain1.example.com. The connecting computer is on a separate domain on Domain2.example.com. Both Domains are joined to Entra ID and are running Conditional Access. I have a policy restricting access to any RDP sessions except for the computer on Domain2. I also have MFA and Locations policies, and all policies are authenticating, and Conditional Access is authenticating, but fails to allow access to the system still.
I attached two pictures of the error messages I am getting.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Carolyne 1,151 Reputation points Microsoft Employee2026-02-03T09:16:39.51+00:00 Are you using Microsoft Entra–based RDP authentication (or Azure Bastion / RD Gateway) and target Conditional Access to the Microsoft Remote Desktop sign‑in flow as outlined in the documentation here https://learn.microsoft.com/en-us/windows/client-management/client-tools/connect-to-remote-aadj-pc and here https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows?pivots=identity-extension-vm
Sign in to comment
1 answer
Sort by: Most helpful
-
Deleted
This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Comments have been turned off. Learn more