Skip to main content

Instructions to Successfully RDP to Windows 11 Azure AD Joined Desktop

Description



How to get RDP working on an Azure Joined PC. 

Resolution


    1. First, make sure RDP is actually enabled on the Windows 11 device. When mine first booted up from AutoPilot it was turned off. 
      1. Navigate to Settings > Systems > Remote Desktop > make sure this option is toggled "On".
      2. A screenshot of a remote desktopDescription automatically generated
    2. On the computer you're going to use to remote into the Windows 11 device (in my instance it was my Windows 10 Pro desktop) you'll need to create a new RDP shortcut on your desktop that we can edit with notepad.
      1. Open Remote Desktop Connection from the start menu.
      2. Enter the IP or Hostname of the Windows 11 device in the Computer field.
      3. In the Username field enter domain\username (ex: accent\bob.smith) 
        1. You will find some instructions online that will tell you to try things like azuread\bob.smith@domain.com or azuread\bob.smith, but neither of those worked for me when trying to connect.
      4. Save As, name it whatever you want, and then save it to your Desktop.
    3. Next you'll need to edit this RDP icon with Notepad (or any other application that can do text editing. 
      1. Open Notepad
      2. Navigate to File > Open which will open File Explorer.
      3. In the bottom right of the File Explorer window, change the type of item you're looking fro from "Text Documents (*.txt)" to "All Files (*.*)". Navigate to the desktop (or wherever you saved the RDP shortcut to) and open it.
      4. Scroll to the bottom of the of the text document and add the below two lines in this order: 
        1. enablecredsspsupport:i:0
        2. authentication level:i:2
      5. Navigate to File > Save an then exit the text document.
    4. Now you should be able to double click the RDP icon, and it should take you to the login screen to enter your password.
  1. If you followed the above instructions, the only other thing I did as a permanent setting was going into the Windows Firewall and adding RDP connection on the inbound/outbound rules. I tried many other things that didn't end up working that I reversed before trying the above text editing method, so hopefully this will help save someone else time in the future.