azure ad registered device

Question

azure ad registered device

testuser7 286

Hello,

If I register my organization's hybrid-joined device into some 3rd party tenant, when I query this device object in this 3rd party tenant I want to see some attribute filled with information about my org's tenant ( where it is hybrid-joined)

Is it possible ?

As you can guess, I want to make some CA-policy with the help of device-filters around that attribute in this 3rd party tenant.

Thanks.

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2022-09-09T06:55:43.993+00:00

@testuser7 Thank you for reaching out to us. Researching this scenario in my lab and will revert back with my findings on your query.

3 answers

Your answer

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2022-09-09T06:55:43.993+00:00

@testuser7 Thank you for reaching out to us. Researching this scenario in my lab and will revert back with my findings on your query.

Answer 1

Givary-MSFT 35,626 Microsoft Employee Moderator

@testuser7 Did a quick repro at my end, at first place you wont be able to register your hybrid azure ad device to a different tenant, on trying the same you will get the error like below.

If a Device A is hybrid joined to Tenant A, wont be able to register to Tenant B.

Let me know if you have any further questions.

Answer 2

testuser7 286

@Givary-MSFT

you need to relook your set up.

I have AAD-registered 100 windows 10 devices to Tenant B which are ALREADY hybrid joined to tenant A

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2022-09-12T06:28:22.133+00:00
@testuser7 if you can check the following

when you run the dsregcmd /status - tenant details to which your device is joined/registered is displayed under , if you can share a similar screenshot for one of the devices which is registered/hybrid joined in different tenants.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#:~:text=You%20can%20synchronize%20device%20objects%20to%20more%20than%20one%20tenant%20but%20a%20device%20can%20be%20Hybrid%20Azure%20AD%20Joined%20to%20only%20one%20tenant.

]2

The only possibility to have one device/object synced to multiple Azure AD tenants is by using multiple Azure AD connect/sync servers, but device will be active only in one tenant, will be disabled in another tenant

Let me know if you have any further questions.

Answer 3

testuser7 286

my friend, you can always register the device is more than one tenant.

I can see all those registration in dsregcmd /status

Share via

azure ad registered device

3 answers

Your answer