Forum Discussion

Don_Vlogeer's avatar
Don_Vlogeer
Brass Contributor
Aug 04, 2023

Converting Azure Registered device into hybrid azure ad joined

Dear All, 

 

We are in the process of planning conditional access to manage devices. So far devices only sync to azure ad and status showing azure ad registered. 

 

How can we convert those azure ad registered device into hybrid azure ad joined. What will happen on user end if enable hybrid azure ad joined from AAD connect. 

 

Thank you all in advanced. 

AzureAD
Conditional Access
Hybrid azure ad joined
Intune

4 Replies

Sort By
  • MathieuVandenHautte's avatar
    MathieuVandenHautte
    Iron Contributor
    Aug 04, 2023

    Hi Don,

    Azure AD registered devices will not be converted but Hybrid Azure AD joined devices will be added to the devices-list in Azure AD.

     

    Users will not experience any changes when devices are added as Hybrid Azure AD joined devices.

    1. Microsoft Azure Active Directory Connect
    - Additional tasks > Configure device options > Configure Hybrid Azure AD join > Windows 10 or later domain-joined devices > SCP configuration
    - Sync setting > Domain/OU filtering > sync your devices (computer objects)
    - PowerShell: Start-ADSyncSyncCycle -PolicyType inital

    IMPORTANT: computer objects first have to be synced to Azure AD before they contact Azure AD to be enrolled!

    2. Device prerequisites
    - Windows 10/11 OS. Note that Windows Home editions are not supported!
    - Line of sight of the domain controller(s) when being added as Hybrid Azure AD joined devices
    - Please first test connectivity to Azure AD: https://learn.microsoft.com/en-us/samples/azure-samples/testdeviceregconnectivity/testdeviceregconnectivity
    - Two regkeys must exist (this can be accomplished via GPO):
    SOFTWARE\Microsoft\Windows\CurrentVersion\CDJ\AAD >TenantId
    SOFTWARE\Microsoft\Windows\CurrentVersion\CDJ\AAD >TenantName
    - Reboot the devices to start the join-process or join the device via CMD > dsregcmd /join /debug

    4. Device troubleshooting
    - CMD > dsregcmd /status
    - Event viewer > Applications and Services logs > Microsoft > Windows > User Device Registration > Admin

    • billgray1966's avatar
      billgray1966
      Copper Contributor
      Feb 27, 2024
      Just as a note, with Windows 1809 and later, the duplicate entry for registered and joined are cleaned up and the registered entry is removed once the joined status acheived.
      • srinivas_pasupuleti's avatar
        srinivas_pasupuleti
        Copper Contributor
        Jun 13, 2024
        In my organization devices are azure ad registered(intune enrolled)+ domain joined .when i enable entra hybrid join it shows dual state like entra registered(intune) and entra hybrid joined.How can i make entra hybrid joined to Intune enrolled and removed the entra registered state.Around 1000 devices are their it is difficult form me to unenroll entra registered device and enroll to hybrid join and intune enroll.

Resources