AD authentication query in hybrid configuration.

%3CLINGO-SUB%20id%3D%22lingo-sub-2817040%22%20slang%3D%22en-US%22%3EAD%20authentication%20query%20in%20hybrid%20configuration.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2817040%22%20slang%3D%22en-US%22%3E%3CP%3EStrange%20question%2C%20but%20in%20a%20hybrid%20environment%2C%20whereby%20your%20user%20accounts%20are%20created%20in%20the%20local%20AD%20and%20synched%20over%20to%20azure%20AD%2C%20but%20the%20Windows%20device%20they%20are%20using%20is%20not%20registered%20in%20the%20local%20AD%20in%20anyway%2C%20but%20are%20registered%20%26amp%3B%20enrolled%20in%20InTune%2C%20when%20the%20user%20logs%20in%20with%20their%20account%20at%20the%20interactive%20login%20screen%20on%20their%20Windows%20device%2C%20which%20AD%20are%20they%20authenticating%20against%20(on-premise%20AD%20or%20Azure%20AD)%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2817040%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eidentity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOn-Premises%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

Strange question, but in a hybrid environment, whereby your user accounts are created in the local AD and synched over to azure AD, but the Windows device they are using is not registered in the local AD in anyway, but are registered & enrolled in InTune, when the user logs in with their account at the interactive login screen on their Windows device, which AD are they authenticating against (on-premise AD or Azure AD)?

0 Replies