Very aware of the two technologies and how they differ/work and how to set u it up.I inherited an old environment and they have all their Windows 10 devices Azure AD registered (not syncing OU with computer nor SCP etc setup).I want to move to Hybrid Azure AD joined. I know the steps but I wonder what will happen to all the 800+ Windows 10 devices already registered?Will they magically be replaced with Hybrid Azure AD joined objects in Azure AD? Will I get duplicate items? Do I need to do something on the client side or will daregcmd /status simply show YES?Anyone done such switch?

Correct, it seems to work (we use Conditional Access to require "Hybrid Azure AD joined" to access some cloud apps). However, you see duplicate devices in Azure AD (one that is Azure AD registered from before and one that is Hybrid Azure AD joined) and both of them seems to be active (there's a column saying ACTIVITY and it's recent on both). The client itself also sees itself as still Azure AD registered in Settings > Accounts > Access work or school. We tried removing the Azure AD registered device in Azure AD but the client does not remove itself locally in Settings so it's left there. Not very beautiful but at least it works and we focus to deploy 1809 so it all solves by itself.

They aren’t domain joined today, right?Just try doing one manually before you setup the SCP! You could also set GPO not to auto register on those you don’t want to do a test run on, if you want to setup the SCP beforehand!I believe they will not duplicate! Not 100 % sure thoughAdam

Thanks for your quick reply.They are on-premises AD joined + Azure AD Registered. I want to move to still on-premises AD joined + Hybrid Azure AD joined.How do you manually Hybrid Azure AD join a client without creating the SCP record? This seems to be the first step in the guide: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-manual-stepsFor the record, we're running PSH+SSO.Otherwise, the GPO to make sure the devices not to register automatically is a good idea: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-control

We have a very similar situation in my environment. What did you end up with?

From 1607 it should work: https://docs.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-hybrid-join-windows-currenta work or school account was added prior to the completion of the hybrid Azure AD join. In this case, the account is ignored when using the Anniversary Update version of Windows 10 (1607).But you will still see the Azure AD registered device in Azure AD. From 1809, it will even remove the Azure AD registered device from Azure AD and remove it in the Windows 10 Settings: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan#review-things-you-should-knowAny existing Azure AD registered state would be automatically removed after the device is Hybrid Azure AD joined.This is what we've seen so far during our testing. Let us know how your testing goes.

From Azure AD Registered devices to Hybrid Azure AD joined

adam deltinger
MVP
Nov 24, 2018
They aren’t domain joined today, right?
Just try doing one manually before you setup the SCP! You could also set GPO not to auto register on those you don’t want to do a test run on, if you want to setup the SCP beforehand!
I believe they will not duplicate! Not 100 % sure though

Adam
- JonasBack
  Steel Contributor
  Nov 24, 2018
  Thanks for your quick reply.
  
  They are on-premises AD joined + Azure AD Registered. I want to move to still on-premises AD joined + Hybrid Azure AD joined.
  
  How do you manually Hybrid Azure AD join a client without creating the SCP record? This seems to be the first step in the guide: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-manual-steps
  
  For the record, we're running PSH+SSO.
  
  Otherwise, the GPO to make sure the devices not to register automatically is a good idea: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-control
  - KyleF645
    Copper Contributor
    Feb 27, 2019
    We have a very similar situation in my environment. What did you end up with?

Forum Discussion

From Azure AD Registered devices to Hybrid Azure AD joined

Share

Resources