Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

Azure AD Hybrid Setup

Copper Contributor

Hi Everyone,

 

I have multi forest environment that I would like to sync to Azure AD with AD connect, is it possible to achieve below:

 

1. Sync two domains to one Tenant.

2. SSO for the two domains.

3. Sync Devices to Azure AD and use Intune to manage, and how?

 

Thanks for your help in advance!

Arya

1 Reply
best response confirmed by Arya1028 (Copper Contributor)
Solution
Hi Arya,

1. Yes, you can sync directories. It should be under Add Directory in Ad Connect. You need to have s2s vpn between the domains.

Check Multiple forests single AD tenant.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies


2. I recommend using Seamless SSO, easy to setup with AD-Connect.

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/hybrid/tshoot-connect-sso

3. You can use GPO to enroll devices to MDM, you have some prerequisites like Intune license, Windows build version and Intune Cname setup etc.

https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatica...

Hope this helps!
Moe
1 best response

Accepted Solutions
best response confirmed by Arya1028 (Copper Contributor)
Solution
Hi Arya,

1. Yes, you can sync directories. It should be under Add Directory in Ad Connect. You need to have s2s vpn between the domains.

Check Multiple forests single AD tenant.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies


2. I recommend using Seamless SSO, easy to setup with AD-Connect.

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/hybrid/tshoot-connect-sso

3. You can use GPO to enroll devices to MDM, you have some prerequisites like Intune license, Windows build version and Intune Cname setup etc.

https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatica...

Hope this helps!
Moe

View solution in original post