The Mysterious Case of the $ (a.k.a. Dollar Sign) Character in Hybrid Azure AD Joined Devices

RhysGoodwin  First of all , apologize for the delayed response and thanks for your comment.  That is a very interesting scenario that I've never ran into - Technically yes in order to consider any device to be truly "hybrid Joined"  it has to be synced , this way Azure device registration service  does its magic too.   It is interesting that you are even seeing CA's applying properly ,  I'm curious, when you run dsregcmd /status on one of these not-synced devices , to you see a proper PRT?