Home

Disallowing users to register devices with Azure AD

%3CLINGO-SUB%20id%3D%22lingo-sub-172353%22%20slang%3D%22en-US%22%3EDisallowing%20users%20to%20register%20devices%20with%20Azure%20AD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-172353%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20at%20my%20company%20we%20are%20a%20BYOD%20environment.%20%26nbsp%3BLately%20we%20have%20noticed%20some%20'oddities'%20with%20our%20PCs%20that%20have%20either%20registered%20or%20joined%20the%20Azure%20AD.%20%26nbsp%3BWe%20have%20already%20disabled%20or%20I%20should%20say%20do%20not%20allow%26nbsp%3Bamy%20machines%20to%20join%20the%20domain%2C%20but%20still%20have%20them%20registering.%20%26nbsp%3BWe%20would%20like%20to%20turn%20this%20feature%20all%20also.%20%26nbsp%3BPrior%20to%20doing%20such%20I%20simply%20would%20like%20to%20ensure%20that%20this%20would%20be%20'non-destructive'.%20%26nbsp%3BWe%20have%20noticed%20that%20there%20is%20information%20stored%20about%20some%20of%20the%20machines%2C%20namely%20bitlocker%20recovery%20keys.%3C%2FP%3E%0A%3CP%3EIf%20we%20change%20the%20setting%20%22Users%20may%20register%20their%20devices%20with%20Azure%20AD%22%20to%20%22None%22%20do%20we%20lose%20the%20stored%20data%20about%20the%20device%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThank%20you%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-172353%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-198829%22%20slang%3D%22en-US%22%3ERe%3A%20Disallowing%20users%20to%20register%20devices%20with%20Azure%20AD%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-198829%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20anyone%20have%20a%20response%20to%20this%3F%20I%20would%20also%20like%20to%20know%20the%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlongside%20this%20I%20would%20like%20to%20ask%20the%20following%3A%3C%2FP%3E%3CP%3EWe%20have%20allowed%20users%20to%20join%20Azure%20AD%20for%20a%20long%20time%2C%20if%20we%20disable%20this%20ability%20will%20every%20device%20that%20has%20been%20added%20so%20far%20need%20re-configuring%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Murias O'Ceallagh
Regular Visitor

Here at my company we are a BYOD environment.  Lately we have noticed some 'oddities' with our PCs that have either registered or joined the Azure AD.  We have already disabled or I should say do not allow amy machines to join the domain, but still have them registering.  We would like to turn this feature all also.  Prior to doing such I simply would like to ensure that this would be 'non-destructive'.  We have noticed that there is information stored about some of the machines, namely bitlocker recovery keys.

If we change the setting "Users may register their devices with Azure AD" to "None" do we lose the stored data about the device?

 

Thank you 

1 Reply
Highlighted

Hello,

 

Does anyone have a response to this? I would also like to know the answer.

 

Alongside this I would like to ask the following:

We have allowed users to join Azure AD for a long time, if we disable this ability will every device that has been added so far need re-configuring? 

 

Many thanks :)

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies