Active Directory Administration Cookbook

Limiting who can join Azure AD devices

Perform these steps to limit the Azure AD Join feature for your organization:

1. Navigate your browser to https://portal.azure.com.
2. Sign in with an account in Azure Active Directory that has the Global administrator role assigned.
3. Perform multi-factor authentication when prompted.
4. In the left-hand navigation pane, click Azure Active Directory.
5. In the Azure Active Directory pane, click Devices.
6. In the Devices pane, click Device settings.
7. Select Selected or None instead of All for the Users may join devices to Azure AD option.
8. When we select Selected:
   1. Specify a group or multiple accounts that are allowed to join Azure AD devices by clicking the No member selected text. The Members allowed to join devices ...