Windows 10 laptop joined to Azure AD cannot connect to SQL Server in Azure VM RRS feed

  • Question

  • Hi

    I have a question regarding a cloud only setup.

    I have looked at some of the Microsoft forums, and all articles written always expect that you have an on-premise Active Directory and need help with joing your Azure AD to that. However, my question is regarding a setup for us as a new Company that wants to be cloud only. This though seems to be rather challenging when it includes SQL Server. So here is the setup:

    I have Azure AD enabled and Domain Services is enabled.

    I have an Azure VM with Windows Server booted up that have SQL Server 2016 installed. The Azure VM is joined to the Azure AD domain with no problem, endpoints are configured and I can connect to the sql server using SQL Server Authentication from my laptop using the xyz.cloudapp.net server path.

    My laptop is running Windows 10 and is joined to Azure AD. So I can login to my laptop using my company email and pw. In SQL Server Management Studio I can see that my user is called AzureAD\User but when trying to connect to the xyz.cloudapp.net I get:

    Cannot connect to xyz.cloudapp.net.

    Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. (Microsoft SQL Server, Error: 18452)

    When using Active Directory Password Authentication where I type in my AzureAD credentials or use Active Directory Integrated Authentication I get:

    Cannot connect to xyz.cloudapp.net.

    A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.) (Microsoft SQL Server, Error: -2146893019)

    The certificate chain was issued by an authority that is not trusted

    So my question is -  is this simply not supported to have a cloud only setup with no on-premise AD where windows 10 laptops joined to the azure AD can be trusted  ?

    Kind Regards


    Monday, June 20, 2016 9:51 AM


All replies