Event banner
Event details
Right now our devices are hybrid joined. If the devices were only joined to the cloud (Entra/Intune), how would that affect accessing on-prem servers that are part of an AD domain?
- Pearl-Angeles
Community Manager
For reference, the panelists covered this topic around 11:58. Thanks!
- Jason_Sandys
Microsoft
Check out How SSO to on-premises resources works on Microsoft Entra joined devices - Microsoft Entra ID | Microsoft Learn for a lot of details on this.
Would going from hybrid to cloud joined devices, would that change the security landscape?
- Jason_Sandys
The move to cloud-native Windows is closely tied with and coincides with Zero Trust. Things like lateral attack vectors (including pass the hash) largely go away with cloud-native Windows along with all of the other benefits of Zero Trust.
one of caveats will be WHB - you need to create a Kerberos object in Azure and push a WHB policy to the devices (Cloud trust is recommended)
Most stuff just works. There's lots of info here: https://aka.ms/cloudnativeendpoints
Best way to find out is to build one! You won't regret it!
