Azue AD Device Management
Good day, I am new to Azure; currently moving workstations to the Cloud (Azure). There are several Windows "devices" DT-23, LT-12, that are visible on the Azure Active Directory devices that are duplicates; with a different 'owner' for the device. How would I ascertain which device should be deleted from the Azure AD? There are more than twice as many devices in the Azure AD than the devices in the organization. What, if any steps, do I take to prevent this?
Sign-in risk Policy and User risk Policy with Azure Conditional Access
HI I have created two conditional policies. 1- Sign-in Risk Policy with MFA enabled (Report only) 2- User Risk Policy with Change User Password (Report only) In both policy I have set Risk "High" At the moment, I do not have any User who has "HIgh" risk. I want to test this policy before production. Is there any way to trigger this policy? I want to see, is this policy is working ok or not. Is there any policy example which can trigger easily? Regards
How to add AAD groups to local groups?
Can anyone tell me how I can you add an Azure AD Group to the local Remote Desktop Users group on an AAD joined PC? I have found many how-tos on adding AAD Users to the group, but nothing on how to add an AAD group. The GUI has no evident options for it and no matter what that variation for powershell we try it comes up "object cannot be found."
Migrate on-prem AD to azure AD having ADDS
I have to move legacy apps from on-prem to azure. What I read is to use ADDS for legacy apps authentication is the only option since some of my legacy apps are using SSO and some has service accounts at on-prem AD. the goals are below: Migrate on-prem active directory to azure active directory and have azure active directory domain services. Migrate local group policies to azure active directory domain services migrate all services accounts from azure managed identities so those can be used on legacy applications. Migrate all user profiles seamlessly. Completely demote on-prem active directory. The environment is having 956 users and 20+ applications. currently have on-prem AD and azure AD and users are hybrid joined. Please guide through the process and best practice for above scenario.Azure Privileged Identity Management - Cartoon explanation
- You are a Cloud lover? - But you prefer Azure? - Learning with fun? - And most of all, a big fan Leat Privileges concept? Maybe you'll like our last Azure Privileged Identity Management comic provided by Jules&Léa. 🥰 If you want to deep dive, do not hesitate to visit the official Microsoft documentation: https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure?WT.mc_id=AZ-MVP-5005062 ++
External user (without MS account) can't access Azure Portal
Hi Members, I need to provide Azure portal access to few external users. They don't have any Microsoft account but only their company email ids, say email address removed for privacy reasons which are not on Microsoft. When I added them as external user. They received invite and after authentication through one time code received on their emails they were able to login to my apps. But, when they try to login to Azure portal they are getting error message: "We couldn't find an account with that username. Try another, or get a new Microsoft account." Do they need to link/create a new Microsoft account with their existing email id i.e. email address removed for privacy reasons? Or is there any way they can use the existing email id to login to Azure portal without creating/linking Microsoft account? As MyApps access worked for them.Right role to reading groups members on Azure AD
Hi Azure community, I have a user who needs to access to the Azure Portal so he can look up only for Azure AD Groups/Members and Ownership. I just want to give right and enough privilege to does his job. Which role is the best to assign to him via PIM? Thanks
