Duplicate Hybrid Azure AD devices

Question

Hello,

My question is simple, is it normal to have duplicates in the Azure AD Devices tab : for every devices I have both a Hybrid Azure AD joined device and an Azure AD Registered device for the same device.
It's the same problem as here, I have a hybrid confiuration with an on prem AD and an Azure AD with AADConnect properly configured :

https://social.msdn.microsoft.com/Forums/azure/en-US/9930dec8-4cc0-445f-9a0e-e2db7c3336b5/duplicate-computers-and-conditional-access-hybrid-azure-ad-join?forum=WindowsAzureAD

Regards,

Hugo

Answer 1

@Hugo Brousse This scenario is known as a Dual state in AAD terminology where the same device ended up with two different identity in Azure AD.
This normally happens in this scenario where -
When your users add their accounts to apps on a domain-joined device, they might be prompted with Add account to Windows
If they enter Yes on the prompt, the device registers with Azure AD. The trust type is marked as Azure AD registered. After you enable hybrid Azure AD join in your organization, the device also gets hybrid Azure AD joined. Then two device states show up for the same device.

Important thing to note is Hybrid Azure AD join takes precedence over the Azure AD registered state. So your device is considered hybrid Azure AD joined for any authentication and Conditional Access evaluation. You can safely delete the Azure AD registered device record from the Azure AD portal.

If you want to get rid of Azure AD Registered entries, here is what you should follow.

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.