I have a user that has MFA, but I want this Entra User to login into an Azure VM. At the moment they cant because they have MFA enabled. How can i set conditional access policy to exclude the MFA only when vm login via rdp ?

when a user tries to connect to a VM vis rdp , is there something on the remote machine that I can run , like a script which checks the users name and if they have permission then they can login , if not then not ?

I have configured a doamin user that has MFA enabled and a user that does not. Now i can successfully do a remote desktop connection with the user that doesnt use MFA , but the user that has MFA enabled says that : “the sign in method you’re trying to use isnt allowed . Try a different sign in method “.

I have a VM in Azure that i created but didnt configure AAD. Where in the settings can i select the check box to make it AAD enabled ?