Incorrect username and password error in Hybrid device join

Benard Mwanza 996 Reputation points
2022-11-03T08:32:44.807+00:00

I have windows 10 machines joined in on-premises windows server 2016 active directory. Have configured hybrid identity with azure AD using AD connect tool. The AD connect tool is configured using express mode settings. I used this article to configure hybrid device join and it worked, devices are synchronized in azure with join type status of "hybrid azure AD joined".
https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-hybrid-azure-ad-join

Now, when I try to login to the machines using azure AD credentials I get "incorrect username and password" as response. Have tried to login to different synced machines using different azure ad credentials but I get the same error message.

The end goal is to be able to activate windows 10 licenses for my machines. The devices are running windows 10 pro version. Each synced user is assigned the windows 10/11 enterprise license, hence after activation, the devices should be updated to **windows 10 enterprise. **

What could I do to troubleshoot the problem or pinpoint what is the issue.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,415 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,088 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Manu Philip 16,951 Reputation points MVP
    2022-11-03T08:54:31.73+00:00

    It's a good idea to check the sign-in logs from Azure Active Directory blade to troubleshoot it further

    256734-image.png

    Also note that, the synchronization needs some time so that the devices allow to login by Azure AD users

    ----------

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

  2. Benard Mwanza 996 Reputation points
    2022-11-23T09:47:26.393+00:00

    Hi @Givary-MSFT

    I managed to get a solution to the login problem, i had to add the custom domain verified in azure in my local active directory. This added logon alias with the custom domain.

    Users are able to login to their synced machines using office365 credentials. We just have one remaining problem; the devices are not stepping from windows 10 pro to windows 10 enterprise as we expect the solution to work.

    As illustrated in this article
    https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

    What further ways can we use to troubleshoot the windows 10 enterprise activation.