Computer joined to Azure AD, however is not visible in AD DS, group policies not applying

Question

The device is logged in using an Azure AD account, and the device is listed in the DS as "joined", however when I created the domain service and went through the devices, the only one visible is the virtual machine, there is no other device.
Why hasn't the device transferred over, and is there a way to make this happen?

Thanks

Answer 1

Hi Stef,

In Azure AD DS, only computer objects for computers that have explicitly domain-joined to the managed domain are shown. Also to note computer objects for computers joined to an on-premises AD DS environment aren't synchronized to Azure AD DS. These computers don't have a trust relationship with the managed domain and only belong to the on-premises AD DS environment.

Check the sync objects in scope, and User accounts, group memberships, and credential hashes are synchronized one way from Azure AD to Azure AD DS. This synchronization process is automatic. You don't need to configure, monitor, or manage this synchronization process.

----
Please don't forget to upvote and Accept as answer if the reply is helpful

If this answer helped you please mark it as "Verified" so other users can reference it.

Answer 2

Thanks for the reply Jimmy, so I'd need to rename the domain of the PC with the DNS of my AD, and that should allow it to be trusted and visible to AD DS? If that's the case, I receive an error when trying, stating that the AD DC for the domain could not be contacted - Do you have any guidance?

Thanks again!

Answer 3

Hi Stef

Apologies if my answer was not clear I meant there is no way to sync device to AD DS as it is not supported and only devices that are connected or joined to managed domain are allowed. Hope this helps.

----
Please don't forget to upvote and Accept as answer if the reply is helpful

If this answer helped you please mark it as "Verified" so other users can reference it.

Answer 4

Oh okay Jimmy I see, I appreciate you getting back to me so fast! Apologies for my misunderstanding but I have a few questions in regards to how this all works:

So if computers can't be synchronised in AD DS, when I configure the group policies which are machined based, such as blocking USBs, that isn't possible? Only User based policies work?
This is my main concern at the moment, trying to set policies and apply them to machines - Is there a method around this?

Thank you!