Forum Discussion
Non profit business standard users join PCs to Active directory
Hi I have waded through masses of online stuff and can't get a clear answer to this. It is driving me insane!
We have about 10 users on nonprofit business standard - all running win 10 or win 11 pro.
I need to allow different users to share a PC - but have user restricted access to microsoft 365 online data - sharepoint - web apps etc
Most older machines are domain aware as in you login with the domain account - they work fine.
Newer machines cannot and all have only local accounts but have stored credentials for the main user for sharepoint etc. That is a problem when a PC is shared as someone may have logged in locally but they have left credentials for sharepoint allowing access. to privileged info
If I upgrade one of the licenses to business premium would that enable me (with admin privs) to join existing and yet to be bought PCs to the domain or would I need a premium license for each user? We don;t need the higher up functionality such as intune as far as I know - just the ability for fred_AT_ourcharity.com to share a PC sensibly with bill_AT_ourcharity.com
3 Replies
- Coppo23Copper Contributor
Thanks. I was afraid that might be the case but still hoping there is a way around it.
In a couple of cases we need to have one PC that is shared between users that have different sharepoint/onedrive accounts without opening up accidental access to the incorrect user. How do i do that?
Before my original post I did find a number of articles suggesting you get a free trial (one user only) of a higher license and use that to make changes to config that would then enable future machines to be added to AD when that trial had expired. In following that idea up I just drowned in a sea of conflicting info. Is that a complete fairy tale?
Failing that approach- how do you cope in a non profit business standard users environment without risking users accessing other users info. (i.e with Local accounts on the pc that is shared between multiple users?
Thanks
Coppo
You cannot enable shared PC Domain/Azure AD join with Business Premium license equipped only, each user who needs to sign in to a Domain‑joined or Azure AD‑joined PC must have a license that includes Azure AD Premium P1.
https://medium.com/@jacknels/plan-your-microsoft-entra-join-deployment-in-2026-an-enterprise-architects-blueprint-cecafe0e6652
https://learn.microsoft.com/en-au/answers/questions/5679002/how-to-add-a-new-windows-device-for-an-existing-us
https://www.microsoft.com/en-us/licensing/product-licensing/azure
- Coppo23Copper Contributor
Sorry - still struggling to understand the differences in NON profit licenses and requirements.
Most of our non profit users have business standard licenses costing around £2.70 per month/user . Most users only work at one PC so if it has only a local user login that is fine.
There are about 4 users who share access to 2 PCs as well as their own PCs - with just themselves as sole user.
What is the minimum cost license solution to allow those 4 users to safely share the 2 PCs without accidental access to each others sharepoint/onedrive data? (Is it a case of upgrading the 4 users to business premium which costs aroudn £4 per month/user.)