Forum Discussion

Jordy Blommaert's avatar
Jordy Blommaert
Copper Contributor
Dec 18, 2019

Conditional Access Hybrid Azure AD Joined

At multiple at our customers we configured a policy that matches all cloud applications only can be accessed when they're using an Hybrid Azure AD Joined device. All their devices are synchronized fr...
Azure Active Directory (AAD)
JonasBack's avatar
JonasBack
Steel Contributor

Jordy Blommaert OK, the only really good way to get out of that mess (when the same device is both Azure AD Registered and Hybrid Azure AD Join) is to update Windows 10 to at least 1809. It should then sort it out by itself and delete the Azure AD Registered device (just give it a little bit time and reboots). Just deleting the Azure AD Registered device in Azure AD is not a good solution since they device will still think it's Azure AD Registered. It's not easy to fix from the client side either since Azure AD Registered is on per-user basis.

Jordy Blommaert's avatar
Jordy Blommaert
Copper Contributor
Dec 20, 2019

JonasBack We reviewed the version of the PC's they are all running Windows 10 Pro Version 1903

  • JonasBack's avatar
    JonasBack
    Steel Contributor
    Dec 20, 2019

    Jordy Blommaert Then it should automatically removed the duplicated Azure AD Registered device. If you go to portal.azure.com > Azure Active Directory > Devices you can search for the name and see when it last had activity. Maybe the Azure AD Registered device haven't had any activity for a long time?

     

     

Resources