How to configure AVD Hybrid Joined?

Question

I have AVD environment with Domain Joined. I would like to configure it to join to Entra ID to become Hybrid. How can I do that?

Answer 1

Welcome to the Microsoft Q&A Platform and thank you for your question!

Since your AVD session hosts are already domain-joined, you can configure them for Hybrid Microsoft Entra Join so they register in both your on-premises Active Directory and Entra ID.

I would like to provide you some information to help you with your concerns.

• Prerequisites

Azure AD Connect installed and syncing with your Entra tenant.

Supported OS (Windows 10/11 Enterprise multi-session, or Windows Server 2016+).

Appropriate authentication method (Password Hash Sync, PTA, or AD FS).

• Configure Hybrid Join with Azure AD Connect

1.On your sync server, open Azure AD Connect → Configure

2.Choose Configure device options → Next

3.Select Configure Hybrid Azure AD join → Next

4.On the SCP screen, select your AD forest and authentication service, then provide Enterprise Admin credentials.

5.Choose the OS versions in scope → Next → Configure

This creates the Service Connection Point (SCP) in AD, allowing devices to auto-register with Entra ID.

• Validate Device Registration

Run the following on a session host: dsregcmd /status

Then, confirm AzureAdJoined = YES and DomainJoined = YES.

In the Entra admin center → Devices → All devices, verify that Join Type shows Hybrid Azure AD joined

• AVD Considerations

Use a consistent join type across all hosts in a pool (avoid mixing Hybrid and Azure AD join).

Hybrid join enables features such as Conditional Access and Intune enrollment for session hosts.

Reference: Configure Microsoft Entra hybrid join - Microsoft Entra ID | Microsoft Learn

Wishing you a successful configuration and have a great day!