How it works...
Out of the box, Windows 10 allows people to join the Azure AD device, marking it as an organizational device in Azure AD. End users who perform this action, by default, gain the same benefits as people using domain-joined devices, in terms of Single Sign-On to Azure AD-integrated cloud applications and being able to sign into other Azure AD-joined devices. With an Azure AD Premium license assigned, they can even benefit from Enterprise State Roaming for their settings.
When a device is domain-joined, it cannot be Azure AD-joined by the end user, because the Azure AD Join feature is considered a bring-your-own-device feature.
Android and iOS-based devices don't offer the Azure AD Join capability, but these devices can be registered ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access