Event banner
Event details
34 Comments
That concludes this episode of Unpacking Endpoint Management for today. Thanks for joining!
In addition to the questions posted on this page, we also answer questions posted in reply to the event on LinkedIn and Twitter -- as well as open questions in the Microsoft 365 Community. Here is the question we answered today:
- From Tech Community -- how do you automatically disable user on aad when users not signed in 30 days on hybrid azure ad joined? - answered at around 18:00
- is there any way we can automate removing a device from on prem AD and Azure AD joining, i work with a lot of customers and this part is the most time consuming
- Off the top of my head I would say a powershell script to do the domain removal, local account setup, and then provisioning package. Or just reset the device and go autopilot. In my experience there was no reason to force someone to AAD only from on prem and just move to AAD only when the device is refreshed/reimaged.
Think if you are retraining a PC Tech team. What is the equivalent of the \\C$ share? Or the logs for techs to look at for troubleshooting? Do you have some recommendations?
- What about renaming Autopilot-deployed Hybrid Azure AD Join devices since Windows Autopilot Hybrid Azure AD joined devices isn’t particularly flexible?
Thanks for participating in today's Unpacking Endpoint Management: Hybrid Azure AD Join should go away! No, it shouldn’t!! For reference, the panel covered this topic at around 52:00.
What methods are available to be aware of EntraID joined devices with on-premise AD tools? Co-management seems like one way but other infrastructure support groups can't "see" those devices as they are reliant on AD-based ITIL systems.
Thanks for participating in today's Unpacking Endpoint Management: Hybrid Azure AD Join should go away! No, it shouldn’t!! For reference, the panel covered this topic at around 47:00.
- What is a common technical obstacle you see customers encounter when evaluating a transition to a full Azure AD environment? One obstacle I've encountered is a large, engrained Group Policy library that doesn't easily convert to configuration profiles with the conversion tool.
Thanks for participating in today's Unpacking Endpoint Management: Hybrid Azure AD Join should go away! No, it shouldn’t!! For reference, the panel covered this topic at around 44:00.
Think of moving to AAD/Entra only an opportunity review what GPO's you have in place and ask why you have them and if you still need them. That move is a great change to start clean and lean.
- I like the way you think! I am in agreement. The remaining challenge will be retooling the app-dependent ones that I am confident will be necessary...
Just 4 Fun.
Douglas Adams in The Salmon of Doubt.- Anything that is in the world when you’re born is normal and ordinary and is just a natural part of the way the world works.
- Anything that’s invented between when you’re fifteen and thirty-five is new and exciting and revolutionary and you can probably get a career in it.
- Anything invented after you’re thirty-five is against the natural order of things.
- Heather_Poulsen
Community Manager
(applause) So true.
- Can Intune now overwrite GPO? Which type of Intune license required?
- https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict
- We are implementing now Hybrid Azure AD Join via Autopilot how we could know that we are ready now to Azure AD Join only?
Thanks for participating in today's Unpacking Endpoint Management: Hybrid Azure AD Join should go away! No, it shouldn’t!! For reference, the panel covered this topic at around 35:00.
- My recommendation spin up a Cloud only device or W365 instance and see what's missing from your organization's usage or requirements. Typically, detours are required for Certificates, Networking(SMB, Radius), and Policys.
- We have many programs larger than the 8GB Intune limit that we keep in Software Center for the groups that need it. If we went AzureAD (EntraID) join and not Hybrid, could we still utilize the ConfigMgr client with Software Center to still support those groups?
- I do this for all my AAD/Entra joined devices now, so long as they are onsite still with the SCCM infrastructure then SCCM does all the app deployments.
Thanks for participating in today's Unpacking Endpoint Management: Hybrid Azure AD Join should go away! No, it shouldn’t!! For reference, the panel covered this topic at around 31:00.
- you can contact intune support and get that limit raised. you can absolutely continue to use the configmgr client on your devices, regardless of join type
