Forum Discussion
JE
Jan 09, 2022Copper Contributor
Hybrid Azure AD join without VPN
Have configured Hybrid Azure AD join successful , dsregstus AD Join yes AAD join Yes. User changed the password(New Password) from corp network and went to home.User is on cached credentials(old Pass...
- Jan 11, 2022Hi JE,
I agree with Rudy you always need VPN with Hybrid Join.
I used to be in the same boat but I used password write back from AD Connect to Active Directory, this way helped a lot as the users will be able to change their password from the cloud and write back to Domain Controller which always make them in sync with Active Directory. The user still needs vpn or on prem to refresh the cached password in his/her pc but at least you always have synced passwords.
Hope this helps!
Moe
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback
Moe_Kinani
Jan 11, 2022Bronze Contributor
Hi JE,
I agree with Rudy you always need VPN with Hybrid Join.
I used to be in the same boat but I used password write back from AD Connect to Active Directory, this way helped a lot as the users will be able to change their password from the cloud and write back to Domain Controller which always make them in sync with Active Directory. The user still needs vpn or on prem to refresh the cached password in his/her pc but at least you always have synced passwords.
Hope this helps!
Moe
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback
I agree with Rudy you always need VPN with Hybrid Join.
I used to be in the same boat but I used password write back from AD Connect to Active Directory, this way helped a lot as the users will be able to change their password from the cloud and write back to Domain Controller which always make them in sync with Active Directory. The user still needs vpn or on prem to refresh the cached password in his/her pc but at least you always have synced passwords.
Hope this helps!
Moe
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback