Forum Discussion
Solved
Dual State HAADJ and AADJ Devices - Autopilot
I have a Server 2022 domain and building Win 10 22H2 devices via Autopilot with HAADJ...and getting the dual device in AAD.
Have re-checked all the documentation and even reworked the steps. Have even tried the BlockAADWorkplaceJoin entry and that does nothing!
We see two entries for every device, with both showing a 'join' value. This differs from other posts I have seen where you will have dual devices with one being Joined and the other Registered. These devices do not automatically clean themselves up.
I am well aware AADJ is far superior to HAADJ. Please do not reply with 'just use AADJ'.
https://www.reddit.com/r/Intune/comments/r5ktyf/device_both_hybrid_azure_ad_joined_and_azure_ad/ - this reference is for Join & Registered
https://learn.microsoft.com/en-us/azure/active-directory/devices/faq#why-do-i-see-a-duplicate-azure-ad-registered-record-for-my-windows-10-11-hybrid-azure-ad-joined-device-in-the-azure-ad-devices-list - also references Join & Registered. During our tests, the users are not accepting any prompts to join work or school.
Reviewed - https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan#handling-devices-with-azure-ad-registered-state
Dan Padgett try this script, it will clean up the dual state by deleting the WPJ (Entra Registered) record:
https://download.microsoft.com/download/8/e/f/8ef13ae0-6aa8-48a2-8697-5b1711134730/WPJCleanUp.zip
The key you are referring to "BlockAADWorkplaceJoin" is to block future users from selecting this option below and joining their work or school account by creating an Entra Registered record (dual state), it doesn't delete the records that have already been created, it just blocks future attempts. The script should do the trick!
1 Reply
nicoleveMicrosoft
Dan Padgett try this script, it will clean up the dual state by deleting the WPJ (Entra Registered) record:
https://download.microsoft.com/download/8/e/f/8ef13ae0-6aa8-48a2-8697-5b1711134730/WPJCleanUp.zip
The key you are referring to "BlockAADWorkplaceJoin" is to block future users from selecting this option below and joining their work or school account by creating an Entra Registered record (dual state), it doesn't delete the records that have already been created, it just blocks future attempts. The script should do the trick!