How to let local AD server to can view the device group from Entra (AAD)

Joseph (Chilin) Wu / FPC Management Center 20

Hi how are you !

Do anyone know how to let NPS (Network policy Server) to add the machine group which is from Entra -- in other words ( how to let local AD To see device Group from Entra

User's image

Marilee Turscak-MSFT 36,926 Reputation points Microsoft Employee

2024-04-02T22:47:22.16+00:00

@Joseph (Chilin) Wu / FPC Management Center just checking to see if you were able to get the information you were looking for? If the information helped you, don't forget to "Accept the answer" so that others in the community with similar questions can more easily locate the solution. Otherwise let us know if you have further questions!

1 answer

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-03-13T10:51:05.6066667+00:00

@Joseph (Chilin) Wu / FPC Management Center Thank you for reaching out to us, this ask is not possible to add the machine/device group which is from Entra in NPS console - Conditions (tab) - Machine groups.

Groups conditions specify user or computer groups that you configure in Active Directory Domain Services (AD DS) not in Entra, more over the NPS server is part of on-premise network.

Reference - https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc731220(v=ws.10)?redirectedfrom=MSDN

Any specific reason you have to add device group in the above mentioned section?

Let me know if you have any further questions, feel free to post back.
Please sign in to rate this answer.
Joseph (Chilin) Wu / FPC Management Center 20 Reputation points

2024-03-13T12:50:41.2+00:00

Hi, how are you thanks for your reply. We need to verify authenticate via Computer base. In NPS, we only can set the condition to verify the local AD 's domain device. Is any way can verify the autopilot machine in Entra?

Regards

Joe

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-03-15T06:19:52.3533333+00:00

@Joseph (Chilin) Wu / FPC Management Center Thank you for sharing your requirement, checked on it, NPS is meant for on-premise setup, it's not possible to verify the autopilot machine in Entra.

Joseph (Chilin) Wu / FPC Management Center 20 Reputation points

2024-03-15T12:33:25.6133333+00:00

Hi Givary ,

Did Microsoft have any plan or tool to overcome this in the future ?

regards

Joe

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-03-26T04:14:23.8766667+00:00

@Joseph (Chilin) Wu / FPC Management Center Would recommend to share your feedback on https://feedback.azure.com/d365community with business justification why you need this feature, so that our product team can review this ask.

Please remember to "Accept Answer", so that others in the community facing similar issues can easily find this post.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to let local AD server to can view the device group from Entra (AAD)

1 answer

Your answer