Merge pull request #84219 from iainfoulds/azureadds-linux-join-nsgs

PRMerger6 · web-flow · commit c0af830e5a98 · 2019-08-02T14:04:15.000-07:00
[AzureADDS] Add note on outbound Kerberos NSG requirement
diff --git a/articles/active-directory-domain-services/join-centos-linux-vm.md b/articles/active-directory-domain-services/join-centos-linux-vm.md
@@ -104,6 +104,8 @@ Now that the required packages are installed on the Linux virtual machine, the n
 
     > [!TIP]
     > Use the same user account you specified in the preceding step ('kinit').
+    >
+    > If your VM is unable to join the domain, make sure that the VM's network security group allows outbound Kerberos traffic on TCP + UDP port 464 to the virtual network subnet for your Azure AD DS managed domain.
 
     ```console
     sudo realm join --verbose CONTOSO100.COM -U 'bob@CONTOSO100.COM'
diff --git a/articles/active-directory-domain-services/join-rhel-linux-vm.md b/articles/active-directory-domain-services/join-rhel-linux-vm.md
@@ -104,6 +104,8 @@ Now that the required packages are installed on the Linux virtual machine, the n
 
     > [!TIP]
     > Use the same user account you specified in the preceding step ('kinit').
+    >
+    > If your VM is unable to join the domain, make sure that the VM's network security group allows outbound Kerberos traffic on TCP + UDP port 464 to the virtual network subnet for your Azure AD DS managed domain.
 
     ```console
     sudo realm join --verbose CONTOSO100.COM -U 'bob@CONTOSO100.COM'
diff --git a/articles/active-directory-domain-services/join-ubuntu-linux-vm.md b/articles/active-directory-domain-services/join-ubuntu-linux-vm.md
@@ -142,6 +142,8 @@ Now that the required packages are installed on the Linux virtual machine, the n
 
     > [!TIP]
     > Use the same user account you specified in the preceding step ('kinit').
+    >
+    > If your VM is unable to join the domain, make sure that the VM's network security group allows outbound Kerberos traffic on TCP + UDP port 464 to the virtual network subnet for your Azure AD DS managed domain.
 
     ```console
     sudo realm join --verbose CONTOSO100.COM -U 'bob@CONTOSO100.COM' --install=/
