Hardened image for Microsoft Windows Server 2022 Datacenter - Level 1 + Entra ID Login

This Azure-based virtual machine is pre-configured with the latest Microsoft Windows Server 2022 Datacenter, hardened to Level 1 baseline standards and enabled for Microsoft Entra ID (Azure AD) login. Designed for organizations that need identity-based access control on their Azure VMs while maintaining a strong security baseline.

Unlike other hardened images which break Entra ID login, this image is specifically engineered to preserve Entra authentication flows while applying robust hardening controls. Ideal for jump box deployments, secure administrative workstations, and any scenario requiring Entra-based RDP authentication with MFA.

This hardened image provides a balanced security foundation suitable for general production workloads while maintaining compatibility with modern identity infrastructure.

• Entra ID login enabled - Sign in to your VM using Entra ID credentials with MFA support
• Level 1 hardening applied - Password policies, account lockout, audit policies, network security, UAC, SMB signing, NTLMv2, TLS 1.2 enforced
• Marketplace-ready - Pre-configured automation handles Entra registration on customer deployment
• Maps to industry standards - NIST Cybersecurity Framework (CSF), ISO 27000 series, PCI DSS, HIPAA
• Jump box optimized - RDP with Network Level Authentication, TLS-only encryption, IPv6 enabled for Azure networking
• Azure CLI pre-installed - Ready for post-deployment automation

1. Deploy VM from Marketplace
2. RDP in as localadmin using the password set at deployment
3. Open PowerShell as Administrator
4. Run: az login (select your subscription if prompted)
5. Run: C:\MIT\MIT_Customer_EntraSetup.ps1
6. Answer prompts (resource group, VM name, Entra users, access level)
7. VM reboots automatically
8. Connect via mstsc.exe with Advanced tab > "Use a web account to sign in"

Madarson IT certified images are always up to date, secure, follow industry standards, and are built to work right out of the box. Our Entra-enabled images solve the common compatibility issue where standard hardened images break Entra ID login.

• Administrator login name: localadmin

• Entra ID P1 license or higher assigned to users connecting via Entra login
• Connecting client must be Windows 10/11 build 20H1 or later
• Connect using VM hostname (not IP) - configure Azure DNS label or local hosts file

Disclaimer: Microsoft owns the trademarks for Windows, Azure, Entra ID and its associated branding. Madarson IT does not provide commercial license on any product.