https://catalogartifact.azureedge.net/publicartifacts/microsoft.aadlogin-windows-arm-1.0.0/Large.png

This extension configures your Windows VM for Azure AD based login.

There are many security benefits of using Azure AD login to Windows VMs in Azure, including:

Use your Azure AD credentials to log in to Azure Windows VMs.
Reduce reliance on local administrator accounts, credential theft, and weak credentials.
Password complexity and password lifetime policies configured for Azure AD help secure Windows VMs as well.
With Azure role-based access control, specify who can login to a VM as a regular user or with administrator privileges. When users join or leave your team, you can update the Azure RBAC policy for the VM to grant access as appropriate. When employees leave your organization and their user account is disabled or removed from Azure AD, they no longer have access to your resources.
With Conditional Access, configure policies to require multi-factor authentication and much more before you can RDP to Windows VMs.
Use Azure deploy and audit policies to require Azure AD login for Windows VMs and to flag use of non-approved local accounts on the VMs.

Azure AD based Windows Login