Active Directory Administration Cookbook

How it works...

Hybrid Azure AD Join leverages the domain-join bond a device has with Active Directory to create a device object in Azure AD. The device object is created and then attached to by the device, leveraging its TPM device as a secure enclave to store the private key for a certificate that seals the bond with Azure AD.

Active Directory on-premises is the source. Azure AD is the destination.

After a device bonds with Azure AD, it no longer updates its data in Azure AD. For instance, if a device has its name changed or operating system upgraded. These changes aren't reflected in Azure AD. A mobile device management (MDM) solution, such as Microsoft Intune, is capable of offering this functionality.

Older versions of Windows, such ...