Event details

We know many of you want to go modern and unlock capabilities like Windows Autopilot, but you likely need to access some legacy on-premises resources. Is Hybrid Azure AD Join the only route? No, but ...
Heather_Poulsen
Updated Dec 27, 2024
Technical Takeoff
Anthony9394's avatar
Anthony9394
Copper Contributor
Oct 26, 2022
We have process that run as SYSTEM (such as service) that need to access file share. It works for HAADJ because we grant the AD computer access to the share but for AADJ, there is no way to grant access. What would be the "work around"?
DaveD-MS-CETS's avatar
DaveD-MS-CETS
Icon for Microsoft rankMicrosoft
Oct 26, 2022

Hi Anthony, apps running on the AADJ joined device can authenticate as users, but must use the implicit UPN or NT4 type syntax with the domain FQDN name as the domain part. E.g user@contoso.corp.com or contoso.corp.com\user. 

Apps and resources using Active Directory machine based authentication don't work because the AADJ devices don't have a computer object in AD. 

How SSO to on-premises resources works on Azure AD joined devices - Microsoft Entra | Microsoft Learn