Dude! Thank you so much! I was about to wipe my laptop just so I could RDP from the mac and yours is the only article that even discussed the login problem. Good old M$ - they give you a solution ("Use your Azure AD to apply corp policy"), tell you how great it will be to use that solution, and promptly "forget" to support it themselves.