In Focus

Azure Hybrid Domain Device Configuration Using AADConnect

In this article, we will see how to Sync devices which are On-Premises domain-joined computers to sync to Azure AD as Hybrid domain-joined computers.

In this article, we will see how to sync on-premises domain-joined computers to Azure AD as hybrid domain-joined computers.

Let’s begin the configuration.

Click on Azure AD Connect to begin the configuration.
 
Azure Hybrid Domain Device Configuration Using AADConnect 

Select configure device options and click on Next,

Azure Hybrid Domain Device Configuration Using AADConnect

Read about Hybrid Azure AD Joined and Device Writeback and click on Next,

Note
In this article, we are not going to see Device Writeback.
 
Azure Hybrid Domain Device Configuration Using AADConnect

Enter Azure AD Global Administrator Account Credentials and Click on Next,
 
Azure Hybrid Domain Device Configuration Using AADConnect

Select Configure Azure AD Join and click on Next,
 
Azure Hybrid Domain Device Configuration Using AADConnect

Enter the details to add the SCP (Service connection point) in the On-Premises Active Directory. It is very much required to do the Hybrid domain join in the backend without user invention.
 
Azure Hybrid Domain Device Configuration Using AADConnect

Enter the Active Directory Enterprise administrator account credentials.
 
Azure Hybrid Domain Device Configuration Using AADConnect

You can enable the SCP by running the configuration or else you can download the script to get it enabled in the later stage.
 
Azure Hybrid Domain Device Configuration Using AADConnect

Select the device types you need to enable the Hybrid AD domain and join.

 

Azure Hybrid Domain Device Configuration Using AADConnect

 

Azure Hybrid Domain Device Configuration Using AADConnect 
 
Click on configure to begin the configuration.
 
Azure Hybrid Domain Device Configuration Using AADConnect

All the elevations have been done to sync the devices. But that is not enough, we need to do a few more additional steps to make this work.
 
Azure Hybrid Domain Device Configuration Using AADConnect

Post configuration tasks for Hybrid Azure AD join
  1. Set Azure AD policy for Windows down-level devices

    1. Log-in to your account in the Azure portal.
    2. Go to: Azure Active Directory > Devices > Device settings.
    3. Set “Users may register their devices with Azure AD” to ALL and Click on Save.

      Azure Hybrid Domain Device Configuration Using AADConnect

  2. Configure group policy to allow device registration

    Create a Group Policy Object or enable the below settings in the domain-based Group Policy.

    <Edit & go to:Computer Configuration > Policies > Administrative Templates > Windows Components > Device Registration

    Azure Hybrid Domain Device Configuration Using AADConnect

  3. Initialize ADSyncDomainJoinedComputerSync

    Azure Hybrid Domain Device Configuration Using AADConnect

    Azure Hybrid Domain Device Configuration Using AADConnect

    You need to type Azure AD Directory Sync Account,

    Azure Hybrid Domain Device Configuration Using AADConnect

    Azure Hybrid Domain Device Configuration Using AADConnect

Initiate full sync using the below command,

Start-ADSyncSyncCycle -PolicyType Initial

After that all the applicable devices based on the OS Versions will start the Hybrid AD domain join.