Issues migratie to Entra Hybrid joined

Question

Hi there!

So we are trying to migrate a customer to Local ad + Entra hybrid joined.

Now after a few hours i only see 4 devices Entra hybrid joined. Those 4 devices seem to be newly added. All other devices are still Local ad joined + Entra registered.

Will those devices automatically become Entra hybrid joined over time, or do we need to fully delete them first from Entra?

I can't really find info about this topic. Only things i found were these articles: https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan

https://learn.microsoft.com/en-us/entra/identity/devices/how-to-hybrid-join

https://techcommunity.microsoft.com/t5/microsoft-entra/from-azure-ad-registered-devices-to-hybrid-azure-ad-joined/m-p/290775

The main thing i want to know is, should the system fix this overtime, if yes of long would it take, if no, what should we do to fix this?

Update: We are now 48 hours after we enabled the hybrid join function and still no changes.

Hope someone can help me.

Regards, Bjorn

Answer 1

Hello @Bjorn Jansen,

Thank you for posting your query on Microsoft Q&A.

From your description, it appears you are attempting to set devices as Microsoft Entra Hybrid joined devices. After syncing from On-prem AD to Entra, only four devices appear as Microsoft Entra Hybrid joined, while the rest are listed as Microsoft Entra Registered.

The Microsoft Entra registered state occurs when users add their accounts to apps on a domain-joined device and accept the prompt to add the account to Windows, registering the device with a Microsoft Entra ID and marking it as Microsoft Entra registered.

You're inquiring whether the system will automatically resolve this issue over time, how long it might take, or what steps should be taken to rectify it.

If devices are not showing as Hybrid in Entra, it indicates that the device object has not properly synced from on-prem AD to Entra. Ensure the devices are within the synced OU.

Remove the Microsoft Entra Registered state, navigate to Settings > Accounts > Access Work or School, select the account, and click Disconnect. Afterward, execute the delta sync command on your Entra connect server to synchronize the device with Entra ID.

Alternatively, log into the device with a synced user account and ensure the device can communicate with a domain controller.

Once the machine is operational, execute dsregcmd /debug /join in admin mode to join the device to Entra as a Hybrid device.

Execute the Delta sync command in the Microsoft Entra Connect PowerShell window:

Start-ADSyncSyncCycle -PolicyType Delta

Subsequently, verify in Entra devices if the device now appears as a Microsoft Entra Hybrid device.

If you're still stuck on this, you can feel free to send me an email at AzCommunity@microsoft.com referencing this issue with a subject line "ATTN:pothurajur" include a link to the current thread. It may be easier to troubleshoot this if there is more visibility into your full setup.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know. Thanks,
Raja Pothuraju.