cannot login to azure ad joined computer

This was to be expected, since the sign-in with Windows Hello for Business is not interactive, but is performed with the Azure AD user certificate. There is no information about this login in the interactive sign-in logs. Since this is a login to Azure AD, there must be other logs available. The sign-in event is logged with an incorrect login in the context of the SYSTEM account.įurther information could not be found on the server. The security event log on the server was not very fruitful. The installed Windows 10 version is 1809 or newerįor sign-in with biometrics this is necessary, with PIN it worked longer.The client has Windows Hello for Business configured.Microsoft’s Troubleshooting Guide describes that the cause is a conditional access policy configured with multi-factor authentication (MFA), an unsupported Windows 10 client version, and Windows Hello for Business not enabled. Try a different sign-in method or contact your system administrator. The sign-in method you’re trying to use isn’t allowed.

Cannot login to azure ad joined computer