Provisioned VM Failed to Join Entra (Azure) AD

  • Published on Apr 3, 2025
  • 1 minute(s) read
  • Jesse Wilson

Error: The desktop could not join the Azure AD domain. Either your Azure AD service account is incorrect, or the template is not set up to support Azure AD. 

 

A close-up of a computer screen AI-generated content may be incorrect.

 

 

Watch Error Message: 

The desktop could not join the Azure AD domain. Either your Azure AD service account is incorrect, or the template is not configured to support Azure AD. 

 

Control Event: 

Azure AD Bulk Primary Refresh Token generation for pool 'POCWin11KW2' failed. Reason: Your Azure AD service account is configured to require multi-factor authentication (MFA). We recommend that the Azure AD account not require MFA. Please adjust your service account settings in Azure AD accordingly. 

 

Solution 

To resolve this issue, set the following feature to NO in Azure. 

A screenshot of a computer AI-generated content may be incorrect.

 

  Note: Customers may encounter this error during the initial setup of their Workspot environment, as it is a one-time configuration process.