Maximize your protection, eliminate business risks.
Optimize and modernize with cloud transformation.
Empower your people to work securely from anywhere.
Let us handle IT so you can focus on growing your business.
Get multichannel 24/7/365 expert end-user support.
Protect, detect, and respond—Dataprise keeps your business secure.
Maximize uptime with with industry-leading DRaaS.
Swiftly mitigate cyber threats and restore security.
Improve efficiency, productivity and outcomes with cloud.
Ensure all mobile devices, everywhere, are secure.
Gain a competitive edge with strategic IT solutions.
This battle-tested checklist enables your team to swiftly initiate a ransomware response.
IT for businesses of all sizes, in any industry.
Empower institution growth with custom IT solutions.
Ensure your firm is always in compliance.
Improve patient care and staff morale.
Deal with pressing legal matters, not IT.
Keep up with the evolving digital landscape.
Focus on your mission by outsourcing IT.
Accelerate PE client deals and secure data.
Empower Your Municipality with Secure, Reliable IT Services
Execute initiatives and develop IT strategies.
Get the latest industry insights and trends.
Join us at events in person and online.
Hear from clients and learn more about strategic IT.
See how Dataprise can make IT your greatest asset.
Get informative technical resources from IT experts.
Stay on stop of emerging cybersecurity threats.
Discover the key areas of DR your organization needs to address to ensure downtime is minimized.
Gain a strategic asset by bringing harmony to IT.
Ensure 24/7 support and security with dedicated teams.
Drive business forward by partnering with Dataprise.
Meet our one-of-a-kind leadership team.
Discover the recognition Dataprise has earned.
Help us help businesses with strategic IT.
Grow through acquisition and partnership with Dataprise.
Embracing different perspectives and backgrounds.
Find a Dataprise location near you.
Dataprise is committed to empowering more women to consider a career in technology.
Explore our trusted partnerships with leading tech innovators.
Posts
By: Stephanie Hamrick
Table of content
Recently Microsoft has taken Azure Hybrid Domain Join out of preview, so it is now a fully supported technology. What is Azure Hybrid Domain Join? Traditionally IT Administrators could either join their devices into their local Active Directory Domain or join them to Azure AD but not both. Each connection type has its own advantages, but they could not be combined. Now you can have both.
Azure AD Hybrid allows Active Directory Domain Joined devices to also join your Azure AD tenant. This allows you to use Seamless SSO, Intune, Windows Hello, MDM, MFA, and other Azure offerings on your company AD joined devices.
Your devices will need to be running Windows 10 for the best feature set, however Windows 8/8.1 are also supported (referred to as down-level devices)
So let’s get started.Find more tutorials like this on the Azure section of our blog!
The first thing you’ll need to do is configure your existing Azure AD connect to enable Azure AD Hybrid.
Note: If you don’t have enterprise admin rights, you can download the PowerShell script to perform this task.
Note: If your current AD Sync is not syncing your AD device accounts, you will need to also reconfigure your AD Connect to sync any OU that contains computer accounts. Azure AD Hybrid join uses this information to determine if your devices will be allowed to perform the Azure AD Hybrid join.
If some of your domain-joined devices are Windows downlevel devices, you must
In order to get your downlevel devices to join, you will have to create or modify an existing GPO to add the following URLs to the local intranet zone in Internet Explorer:
You also must enable Allow updates to status bar via script in the user’s local intranet zone.
Your GPO should end up looking similar to this:
To get your Windows 10 Devices to Azure AD Hybrid join, you’ll need another GPO setting, which could be combined in the GPO for the downlevel devices. You will need to enable “register domain-joined computers as devices” This setting is in Computer Configuration > Policies > Administrative Templates > Windows Components > Device Registration.
Finally a quick test from the command line will verify if this worked. Type ‘dsregcmd /status’ and the first line should tell you very quickly:
And that’s it! If you need more detail, Microsoft has excellent documentation on the process to help you along.
Tutorial: Configure Hybrid Azure AD Join for Managed Domains
Tutorial: Configure Joined Devices Manually
Hybrid Azure AD joined devices
Joe Hanning, Sr. Infrastructure Engineer
INSIGHTS
Subscribe to our blog to learn about the latest IT trends and technology best practices.