Forum Discussion
Can a Guest User Log Into WIndows 10 AAD Joined Machine?
I have added Guest user from don.quixote@windmill.com (which is an AAD tenant) to the AAD tenant holygrail.com
I have made don.quixote@windmill.com a global admin on holygrail.com
Can AAD tenant holygrail.com guest user don.quixote@windmill.com log into a Windows 10 machine which is joined to holygrail.com as guest user don.quixote@windmill.com ?
because this use case does not work for me so would appreciate either no this doesn't work in Windows 10 and despite the terabytes of documentation on Azure B2B, it isnt referring to this core feature that is soul crushing me or ….Yes and here is the procedure other than what I have done above.... much appreciated.
6 Replies
Saw a new feature "federated sign-in for Windows devices" was introduced to "Windows 11 SE, version 22H2 and Windows 11 Pro Edu/Education, version 22H2".
Configure federated sign-in for Windows devices - Windows Education | Microsoft Learn
I guess that I will have to study up on what it would take to add and manage a handful of Education edition PCs in our environment. And manage their guest accounts in Entra.
DonQuixoteAADFollowing. This would be perfect for our transient students, rather than using guest mode on our Lab computers.
https://docs.microsoft.com/en-us/windows/configuration/set-up-shared-or-guest-pc
- Trying to do this as well. If I find a way, I will post it here.
- I don't believe that is possible. - Guest user needs a license and you cannot assign a license to a Guest user. - If the user tries to use his email, it will be user@contoso.com and not user#EXT#contoso.com@fabrikam.com and the source authority will always be the contoso.com
Corsinonot sure other than because of technical complexity Microsoft would not provide the ability for a guest user to log on - it makes life very easy for all around, especially in the world in which we live where high dollar information workers often work for multiple companies
- Hmm Nice use case/question! Have you tried adding it via Windows 10? Also, wondering if you need to assign him a P1 license?
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin
https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin#manually-elevate-a-user-on-a-device
