Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,743 questions
Hey! Thanks for your reply. I already did that but it did not help:
I can not connect to windows VM because of JIT policie
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 35%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Alejandro Alvarez Vazquez
0
Reputation points
Not sure why but RDP was disabled because of a JIT requirement which required the activation of a paid service Cloud workload protection. I created an exemption in "Management ports of virtual machines should be protected with just-in-time network access control" But it does not work. I also disabled it entirely and no way to enable RDP connection.
How can I connect again to the VM as always without upgrading Cloud Defender?
Azure Virtual Machines
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 24%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDR%3C/text%3E%3C/svg%3E)
Dharani Reguri 430 Reputation points Microsoft External Staff2025-05-02T11:21:43.6466667+00:00 I understand that you want to connect to your VM but unfortunately, we couldn't connect to it due to JIT policy. You have also mentioned that there was an exemption for "Management ports of virtual machines should be protected with just-in-time network access control" but if the JIT policy already modified your NSG to block RDP port, adding an exemption stops further changes, but doesn't undo the blocked rule.
So, please go to the NSG linked to your VM and remove any “Deny” rule for port 3389 (created by JIT or policy) and then add a new “Allow” inbound rule to permit RDP.
Please refer to the document below for troubleshooting RDP issues
If you have any further queries, kindly let me know. If the information is helpful, please click on Upvote.
Thank you.
Sign in to comment
1 answer
Sort by: Most helpful
-
Alejandro Alvarez Vazquez 0 Reputation points
2025-05-02T11:33:36.9633333+00:00 -
Dharani Reguri 430 Reputation points Microsoft External Staff
2025-05-02T12:02:06.2533333+00:00 Could you please check if the Public IP of the VM is assigned. If yes, please try to open mstsc.exe → Enter: <your_public_ip>
If the above solution didn't work. I request you to check the Guest OS Firewall rules inside the VM using Serial consol.
Run the following command to check the firewall rules
netsh advfirewall show allprofiles | moreIf the Firewall Policy is set to BlockInbound or BlockInboundAlways, then please change the policy to connect to VM. Like, Modify the DefaultInboundAction for the profiles to Allow the traffic:
REM CMD netsh advfirewall set allprofiles firewallpolicy allowinbound,allowoutboundPlease let me know if you have any questions.
Sign in to comment -