Forum Discussion
Change Azure AD Registered device to Azure AD Joined device
Hello,
What is the preferred process of converting a device that is Azure AD registered to a device that is Azure AD joined? I know that a device can be both, but unable to have a device that has been already registered be able to be Azure AD joined.
Any recommendations?
I have tried a couple scenarios; using the Company Portal app and removing the device and re-adding it, but have been unsuccessful. Device is always registered. The only method that has worked is to reset the PC and perform the Azure AD join when initially setting up the device.
Thanks in advance!
- How did you solve this?
- maier_danCopper Contributor
Anyone knows?
- bbhorriganBrass Contributor
I generally don't convert them. I would set it back up as a Azure AD joined device. Azure AD registered is really designed for, maybe personal devices or other non domain joined.
From Microsoft
Type of device Device platforms MechanismPersonal devices Windows 10, iOS, Android, Mac OS Azure AD registered Organization owned device not joined to on-premises AD Windows 10 Azure AD joined Organization owned device joined to an on-premises AD Windows 10 Hybrid Azure AD joined
https://techcommunity.microsoft.com/t5/forums/replypage/board-id/Microsoft-Intune/message-id/500
- Deleted
You may want to try the dsregcmd command line tool to un-register (dsregcmd /debug /leave) and then sign out and back in to trigger the scheduled task that joins the device.
- sourabh_jha24x7Copper Contributor
Alex Melching first i removed Azure ad Register device from azure Ad portal, and logged in on Windows 10 Machine went settings and click on account after that click connect and select "join this device to Active Directory" then you can able to do that.
Why your device is going to register after removing from azure portal:-
after removing if you are going to access and Ms 365 app like Teams, Outlook, or SharePoint online your Device ll automatically register with azure AD.
- GratefuljCopper Contributor
I figured it out. Broadly, these are the steps:
1-Remove computer from local domain
2-Remove registered computer from Azure
3-Remove all accounts under settings->accounts->access work or school
4-Remove all GUID keys from HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments (GUID keys look like 18DCFFD4-37D6….). There will likely be one or two it won't let you delete. Leave those. Do not delete the other folders in there. This seems to be the key step
5-Join machine to Azure