Jump into modern managed devices with Azure AD Join

Event details

We know many of you want to go modern and unlock capabilities like Windows Autopilot, but you likely need to access some legacy on-premises resources. Is Hybrid Azure AD Join the only route? No, but ...

Heather_Poulsen

Updated Dec 27, 2024

Technical Takeoff

Marc_Laf

Iron Contributor

Oct 26, 2022

One issue we encountered with AAD Joined and on-prem resources was how AD management tools (ADUC, DNS) required manual specification of the domains or servers to manage and could not use the auto discovery methods like a domain joined could. Also a bigger issue was that an AAD joined device was unable to manage on-prem certificate services successfully. Templates were unaccessable. Are there going to be any improvements in this regard or will we just need to use a hybrid join for these management tasks?

wollewoldemar
Brass Contributor
Oct 26, 2022
Good topic regarding certs! How can we handle certs for device cert based auth for WiFi ?
- Dom73
  Microsoft
  Oct 26, 2022
  Hi Marc and Viktor, For AAD Joined devices, you can distribute certificates with Intune and NDES. You need to install a connector (NDES connector) on an on-premises server and you'll be able to distribute certificates to devices. There's also an option to create and distribute a wi-fi configuration profile on those devices. Please review below links for more information. https://learn.microsoft.com/en-us/mem/intune/protect/certificate-connectors https://learn.microsoft.com/en-us/mem/intune/configuration/wi-fi-settings-configure
  - Marc_Laf
    Iron Contributor
    Oct 26, 2022
    Hi Dominique, I am aware of how to distribute certs, my question was regarding management of Cert Services, particularly Templates. This is impossible from an AAD device.