Forum Discussion

Copper Contributor

Nov 14, 2019

Azure AD joined devices are prompted for their password, signing in to https://portal.office.com/

Hi Guys, At this moment we are trying to migrate our environment to a Microsoft365-only environment. We are running into a problem where Azure AD joined devices are prompted for their passwor...

Access Management

Azure Active Directory (AAD)

Bronze Contributor

Nov 14, 2019

Are you devices AAD Joined or are they also joined to to local domain => Hybrid Azure AD Join?

Copper Contributor

Nov 14, 2019

The devices are AAD joined (no hybrid) and are not able to connect to the server/AD VLAN anyway.

VasilMichev
MVP
Nov 14, 2019
Is the user logged in with their Azure AD credentials? And what does dsregcmd /status show? More specifically, what's the value for AzureAdPrt? You can learn about troubleshooting such scenarios here: https://docs.microsoft.com/en-us/azure/active-directory/devices/troubleshoot-device-dsregcmd
- paulboerdonk
  Copper Contributor
  Nov 14, 2019
  VasilMichev
  Users are indeed logged in with their Azure AD credentials. Looks like the AzureAdPrt settings are OK:
  
  +----------------------------------------------------------------------+
  SSO State
  +----------------------------------------------------------------------+
  AzureAdPrt : YES
  AzureAdPrtUpdateTime : 2019-11-14 11:59:52.000 UTC
  AzureAdPrtExpiryTime : 2019-11-28 16:48:11.000 UTC
  AzureAdPrtAuthority : https://login.microsoftonline.com/1b32xxxx-xxxx-xx-xx-xxxx
  EnterprisePrt : NO
  EnterprisePrtAuthority :
  - VasilMichev
    MVP
    Nov 14, 2019
    And you still get asked for password? Are you using Edge? Chrome needs additional add-ins to support SSO via PRT.

Resources