Forum Discussion

AJ Kertis's avatar
AJ Kertis
Copper Contributor
Nov 19, 2019

Azure AD Windows 10 and Azure AD Connect

So we sync our AD w/ Azure AD Connect and I have Password Hash Sync enabled. I can't seem to login to any Windows 10 Azure AD joined computers with accounts that are synced. I was able to create a cloud only account *.onmicrosoft.com account and it works. Is it possible for the accounts that are synced from AD -> Azure AD to authenticate? Is there something special we need to make this happen? 

  • jasonsch69's avatar
    jasonsch69
    Brass Contributor

    AJ Kertis  what UPN are you creating on the Azure AD side for your users? And does it match the upn for the user in your on prem AD?

    If you are trying to syn a upn like first.last@yourdomain.com and you have not added the domain yourdomain.com to your Azure tenant, then the sync will automatically default to first.last@*.onmicrosoft.com

    • AJ Kertis's avatar
      AJ Kertis
      Copper Contributor

      jasonsch69 we originally started with Office 365 but yeah the UPN used for everything Azure and Office 365 is the same as the one I'm trying to use and is set accordingly in our local AD. 

      • Tommek's avatar
        Tommek
        Brass Contributor

        AJ Kertis 

        first you create your tenant "name".onmicrosoft.com

        second you have to add your custom domain like "yourdomain.com" to your tenant

        3rd your onprem UPN needs to be username@yourdomain.com - if its not than please add it to your onprem AD and change your upn (be careful that needs to tested)

        4th you install AdConnect and sync your user

        5th if this is successfull than you are able to see your users in aad ->users with same upn just like in your onprem-AD 

        6th try to login to portal.azure.com or myapps.microsoft.com with username@yourdomain.com

        7th you also be able to login to your domain-joined-devices with username@yourdomain.com 

         

         

Resources