Entra Hybrid join

Question

We are planning to entra hybrid join devices .At present devices are domain join+intune enrolled(Entra registered).We allowd 4 urls for connectivity in firewall and proxy.we run test device regconnectivity.ps1 in test devices we are getting connectivity sometimes successfull and failure sometimes.when we telnet the urls in test devices it showing connectivity success.I am facing this Issue any answer should be appreciated.

Answer 1

@Dillon Silzer

please find the below link to get the script

https://learn.microsoft.com/en-us/samples/azure-samples/testdeviceregconnectivity/testdeviceregconnectivity/

Answer 2

Hello @srinivas Pasupuleti100,

Thank you for posting your query on Microsoft Q&A.

As mentioned, I see you are planning to make devices as Microsoft Entra Hybrid join. At present devices are Microsoft Entra registered via Intune + domain joined.

https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan#handling-devices-with-microsoft-entra-registered-state

To ensure successful enrollment in Microsoft Entra Hybrid Join, it's crucial to manually remove the Microsoft Entra registered state before proceeding. This step helps prevent conflicts and ensures a smooth transition.

Additionally, to facilitate proper connectivity and enrollment, your organization's network should allow access to the following Microsoft resources through your outbound proxy:

• https://enterpriseregistration.windows.net
• https://login.microsoftonline.com
• https://device.login.microsoftonline.com
• https://autologon.microsoftazuread-sso.com

Ensuring connectivity to these URLs is essential for successful enrollment. Microsoft Entra hybrid joined devices require periodic network access to your domain controllers. Without this connectivity, devices may become unusable.

https://learn.microsoft.com/en-us/entra/identity/devices/how-to-hybrid-join

As you mentioned you have added 4 URLs for connectivity in firewall and proxy. When running the script getting connectivity sometimes successful and failure sometimes. Are there any network change on the device when you got failures. Make sure to have a line of sight to your organization's network.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Thanks,
Raja Pothuraju.

Answer 3

@Raja Pothuraju There is no network change.but when ping those urls it shows ping success.Is these powershell script check will show any wrong results.when I ping those urls in cmd it shows success.any answer should be appreciated.