Forum Discussion
Powershell MSOL and hybrid domain joined
hmm, actually I can not reproduce this.
My device is AAD hybrid joined and we have CA policy requiring hybrid joined devices and another one basically blocking "other clients" aka basic authentication. What are your AAD Sign-In Logs saying exactly .. or the Windows Application and Services - AAD logs?
My machine:
+----------------------------------------------------------------------+
| Device State |
+----------------------------------------------------------------------+AzureAdJoined : YES
with a valid PRT:
+----------------------------------------------------------------------+
| SSO State |
+----------------------------------------------------------------------+AzureAdPrt : YES
AzureAdPrtUpdateTime : 2020-04-15 05:58:26.000 UTC
AzureAdPrtExpiryTime : 2020-04-29 12:26:36.000 UTC
and I can successfully connect to Azure AD using the Connect-MsolService cmdlet.Actually using "Manifest 1.1.183.57 MSOnline"
Maybe you have to update the module installed, aka C:\> Update-Module MSOnline
hth,
Claus
hmm, actually I can not reproduce this.
My device is AAD hybrid joined and we have CA policy requiring hybrid joined devices and another one basically blocking "other clients" aka basic authentication. What are your AAD Sign-In Logs saying exactly .. or the Windows Application and Services - AAD logs?
My machine:
+----------------------------------------------------------------------+
| Device State |
+----------------------------------------------------------------------+
AzureAdJoined : YES
with a valid PRT:
+----------------------------------------------------------------------+
| SSO State |
+----------------------------------------------------------------------+
AzureAdPrt : YES
AzureAdPrtUpdateTime : 2020-04-15 05:58:26.000 UTC
AzureAdPrtExpiryTime : 2020-04-29 12:26:36.000 UTC
and I can successfully connect to Azure AD using the Connect-MsolService cmdlet.
Actually using "Manifest 1.1.183.57 MSOnline"
Maybe you have to update the module installed, aka C:\> Update-Module MSOnline
hth,
Claus
Claus Witjes I have the same issue, device is Hybrid Azure AD joined and has AzureAdPrt : YES. I tried to connect via powershell using Msol module or ExchangeOnline module (3.0.1) without success. Conditional Access enforce MFA (CA has in grant setting MFA or hybrid azure ad join, scope all cloud app) In Azure AD sign in there is in powershell connection Device ID is empty
