Forum Discussion

AEchtermeijer's avatar
AEchtermeijer
Copper Contributor
Jun 09, 2022

Question: Script to see if device is Azure AD joined

We often receive notebooks that are still joined to a Azure AD tenant. Is there a (simple) Powershell script that shows if a device is still joined to a tenant? Knowing which exact tenant the device ...
azure active directory
microsoft intune
Mobile Device Management
Harm_Veenstra's avatar
Harm_Veenstra
MVP
Jun 10, 2022
$subKey = Get-Item "HKLM:/SYSTEM/CurrentControlSet/Control/CloudDomainJoin/JoinInfo"

$guids = $subKey.GetSubKeyNames()
foreach($guid in $guids) {
$guidSubKey = $subKey.OpenSubKey($guid);
$tenantId = $guidSubKey.GetValue("TenantId");
$userEmail = $guidSubKey.GetValue("UserEmail");
}

write-host $tenantId $userEmail

(Got this from https://nerdymishka.com/articles/azure-ad-domain-join-registry-keys/ , it works for me and shows me the tenantid and the account which was used for joining)
B4Art's avatar
B4Art
Brass Contributor
May 13, 2024

A little extension to your script:
$subKey = Get-Item "HKLM:/SYSTEM/CurrentControlSet/Control/CloudDomainJoin/TenantInfo/$tenantId"
$tenantInfo = $subKey.GetValue("DisplayName")
write-host $tenantInfo

 

And for completeness:

$subKey = Get-Item "HKLM:/SYSTEM/CurrentControlSet/Control/CloudDomainJoin/JoinInfo"

$guids = $subKey.GetSubKeyNames()
foreach($guid in $guids) {
	$guidSubKey = $subKey.OpenSubKey($guid)
	$tenantId = $guidSubKey.GetValue("TenantId")
	$userEmail = $guidSubKey.GetValue("UserEmail")
}

$subKey = Get-Item "HKLM:/SYSTEM/CurrentControlSet/Control/CloudDomainJoin/TenantInfo/$tenantId"
$tenantInfo = $subKey.GetValue("DisplayName")

write-host $tenantId
write-host $tenantInfo
write-host $userEmail

Resources