Forum Discussion

testuser7's avatar
testuser7
Brass Contributor
Oct 09, 2020

PRT for Windows Server

Hello,

We know that Cloud Authentication Provider (CloudAP) and Azure AD CloudAP plugin are the primary components for obtaining  Primary Refresh Token  (PRT)  from Azure-AD  on Windows 10 devices which are  AAD-joined OR  hybrid-joined.

 

I want to know,  if Cloud Authentication Provider (CloudAP) and Azure AD CloudAP plugin  is available on Windows Server 2019  so that if such server is  hybrid-joined  then I can expect a PRT when I sign into this server.

 

Thanks.

Thanks.

 

 

Azure Active Directory (AAD)
Identity Management
  • Josh Villagomez's avatar
    Josh Villagomez
    Icon for Microsoft rankMicrosoft
    Oct 09, 2020

    Correct. Windows Server 2019 is a supported device in this scenario. See this link. In order for the signed-in user to successfully obtain a PRT token, the device - in this case WinSrv2019, must also be successfully joined or registered to your AAD (AAD Joined or AAD Hybrid-Joined) as a pre-requisite. The dsregcmd tool is very useful for this. Hope this helps. 

    • testuser7's avatar
      testuser7
      Brass Contributor
      Oct 10, 2020

      Josh Villagomez 

       

      I think you did not get my question.  The discussion is NOT around whether we can hybrid join the Windows Server 2019 device or not.

      Of course we can as the link that you showed is clearly telling that.

       

      The question is , can you get PRT on such hybrid device when you sign into the device.

      If you check the first line of this link PRT ,  it tells that "A Primary Refresh Token (PRT) is a key artifact of Azure AD authentication on Windows 10, iOS, and Android devices."

       

      I want to know if windows server 2019 is part of above line.

       

      Thanks.

       

       

       

       

Resources