GPO and hybrid AD

Question

GPO and hybrid AD

Polo22 1

Hi there,
I have a question regarding GPO in AD hybrid mode (on prem AD & AAD):

Can local domain GPOs apply on my computer if Im not on the local network but outside? Or its impossible with an hybrid mode to receive GPO from the local Active Directory

Thanks for the clarification

0 comments

2 answers

Your answer

Answer 1

Polo22 1

I understand thank you !

0 comments

Answer 2

Alan Kinane 17,361 MVP Volunteer Moderator

You would have to be connected to your domain controller (via VPN for example) in order to receive the GPOs from your AD environment. The fact that your have an AD hybrid would not help here. Alternatively you could look into using Administrative Templates from Microsoft Endpoint Manager as a means to provide policies directly from the cloud.

Polo22 1 Reputation point

2021-08-19T18:31:22.023+00:00

allright, and one last question , if my computer is in workgroup, in the local network, but joined to Azure AD domain, it stills not possible to receive GPO right ?
Alan Kinane 17,361 Reputation points MVP Volunteer Moderator

2021-08-20T08:10:31.413+00:00

Not really. You would have to set up local group policies on each device. The devices ideally need to be domain joined (or Hybrid joined) so you can use a centralised domain group policy and push your GPOs from your domain controllers. Otherwise, you can still use Microsoft Endpoint Manager if they are Azure AD joined but in a workgroup.

Share via

GPO and hybrid AD

2 answers

Your answer