Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [azure-active-directory]

Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.

Filter by
Sorted by
Tagged with
0 votes
0 answers
6 views

Tease out extensionAttribute5 with get-mguser

Trying to force myself to start using graph thru powershell since it looks like the AzureAD powershell commandlets are going the way of the dodo at some point. Wondering if there is a way to use get-...
user avatar
0 votes
1 answer
7 views

Azure AD B2C and aka.ms/mfasetup

I have an Azure AD tenant and I created an Azure AD B2C tenant for an app that I am building. The "short link" for MFA setup is https://aka.ms/mfasetup but that allows me to configure MFA ...
user avatar
0 votes
0 answers
12 views

Error - Failed To Access Active Directory Failed to access Active Directory while creating resourse Azure Information Protection

I'am trying to give the hability to my users to be able to sync their Microsoft Edge features (such like bookmarks, passwords,...), over their Azure AD accounts, but I am unable to setup Azure ...
user avatar
0 votes
0 answers
13 views

Shared folder on AzureAD server accessible to local domain?

We are moving to M/O365 and will need to script pulling attachments from e-mails. Those files will need to go into a shared folder that is accessible by computers on the local domain. Is this shared ...
user avatar
  • 45
0 votes
1 answer
17 views

Only federate some users in AzureAD and not a whole domain

We want to test a new IDP in our organization ( this IDP is an inhouse SAML-compatible idp ). We are using AzureAD. If we federate a new domain, we can test the authentication, and it works ( xxx@...
user avatar
  • 99
0 votes
1 answer
33 views

Create a Mail-enabled security groups with Azure AD role assignment?

I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks ...
user avatar
0 votes
1 answer
26 views

How can push AzureAD identities to on prem ActiveDirectory

Situation is that we have multiple sites (AWS VPCs), each with their own self-managed ADDS domains with no network connectivity between them (by design). We need to provision each sites ADDS users ...
user avatar
1 vote
2 answers
26 views

How can I specify an Azure tenant name?

How can I specify an Azure tenant name? I mean {something}.onmicrosoft.com name. I have tried to register a new Azure tenant a few times and each time I created a new Microsoft account and then a new ...
user avatar
  • 307
0 votes
1 answer
22 views

How do I link Office 365 service to existing Azure AD?

I want to buy a new Office 365 offering but I do not want it to use its own Azure AD, instead I want it to use the Azure AD tenant that I specify. Is this done at Office 365 creation time or can be ...
user avatar
0 votes
0 answers
16 views

Force use of dedicated secondary admin accounts in Intune/AAD environment

Short situation sketch: I inherited a customer environment where all devices are Azure AD joined and managed via Intune. The Azure AD account with which the user logs on, is local administrator. I ...
user avatar
0 votes
0 answers
26 views

Unable to access specific rest apis due to azure error

My application using spring rest and deployed in Azure server. Created rest apis using spring rest. Am able to access all rest urls, except in one scenario. for eg: http://mydomain123.com/api/abc , ...
user avatar
  • 1
0 votes
0 answers
25 views

Federating Google workspace with AAD B2B

I am trying to federate Google Workspace (as IdP) with Azure AD B2B. There seems to be mixed instructions on how to do that. From the Office MS documentation, it said verified domain is not support on ...
user avatar
0 votes
0 answers
13 views

Blocking Application Installation via Intune or custom OMA-URI for Admin Users

I have 10 systems where only 1 account exists on the Windows machines which is the microsoft work account. There are no local Admin accounts on these systems. I am able to block CMD, RegEdit, ...
user avatar
0 votes
1 answer
21 views

Way to convert user account on Windows 10 from on-prem AD to AzureAD?

Many employees are now remote that haven't been in the past. We would like them to start using an AzureAD logon for their laptops instead of user tied to our office's Active Directory system. My ...
user avatar
  • 687
0 votes
0 answers
42 views

802.1x Wireless with certificates for AADJ/Intune devices without user affinity

I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
user avatar
0 votes
0 answers
58 views

Authentication to SonarQube with Azure AD

I have a taks to implement authentication to SonarQube with SAML from Azure AD We are using SonarQube 8.9.6 LTS with openjdk 11.0.14 OpenJDK Runtime Environment build 11.0.14+9 on Ubuntu 20.04. I've ...
user avatar
  • 1
0 votes
0 answers
22 views

Azure AD Conditional Access Policy - Require Security Key as Multifactor

I am exploring the Security options for user signin ( specifically admin signin ) to Azure Portal and other Azure App and my requirements is specifically that the user should enter the password and ...
user avatar
0 votes
0 answers
15 views

How do I run an app from the command line during an Azure pipeline that accesses Key Vault?

I have a UI automation testing tool that runs from the command line. It uses Azure Key Vault via SecretClient in the source code. This works great for QA people who are running it locally and can log ...
user avatar
0 votes
0 answers
155 views

Wrong 'executing account name' on Azure AD joined machines (Windows 11, Autopilot)

Currently we have 'Azure AD Domain Services' activated in our tenant, which is a managed AD through Azure. Data is being synchronised between Azure and the managed AD. We're preparing to migrate away ...
user avatar
0 votes
0 answers
25 views

Gitlab: Possible to specify roles in Azure AD manifest?

I already use Azure AD for login to Gitlab and now I want to manage roles (Regular user, Admin user) in Azure AD as well and pass them to Gitlab. Roles can be stored in the Azure Manifest, which are ...
user avatar
  • 101
0 votes
0 answers
75 views

Requirements for RDP from Azure AD Registered device

We are a small company (4 users, 7 devices) and have recently moved from a mess of local accounts on our PCs to using Azure AD for Office 365. The plan was to have accounts for each user and for ...
user avatar
  • 101
0 votes
0 answers
114 views

Cannot login with email after joining Azure AD

Let's say my company has an Azure AD "domainx.com". I used Window 11 Pro and joined my laptop (device not account) to domainx.com. I entered my AAD account information and the machine joined ...
user avatar
0 votes
0 answers
13 views

Azure Sentinel Alert on below average Log events

I need to create a query that runs against my servers that send logs to Azure Sentinel. I want to get an average say, over the last 7 days, and if the current 24 hour window is below the average by a ...
user avatar
0 votes
0 answers
9 views

Password less authentication (MFA) in Azure AD is asking to input number - How can we prompt for one?

We would like to have password less MFA in Azure provide a list of numbers to choose from instead of having to type in a number. Is there a configuration in Azure for this somewhere?
user avatar
  • 101
-1 votes
1 answer
29 views

Is it possible for CodeTwo to choose a server-side signature based on the mail's language?

I wasn't sure if this was the correct place for this question but here goes. I want CodeTwo (With Azure) to fetch a certain signature based on the mail's language content. Is this possible? Or am I ...
user avatar
0 votes
1 answer
30 views

What is the default RBAC scope used when assigning a role in Azure with the CLI?

This is the documentation for the az role assignment create command: https://docs.microsoft.com/en-us/cli/azure/role/assignment?view=azure-cli-latest#az-role-assignment-create --score is an optional ...
user avatar
  • 109
0 votes
1 answer
34 views

Azure Cloud Zero Trust Access (App Registration?)

Working with the Azure Cloud: I am looking into a solution where I can have users authenticate via Azure AD so they can access an app hosted on a virtual machine. This is something very similar to ...
user avatar
-1 votes
1 answer
48 views

How do companies make sure resources created by an employee are not deleted when he is fired in Azure?

Correct me if I am wrong, but my understanding is that when an Azure account is deleted, all associated resources are also gone. This makes sense because else I would keep being charged for using ...
user avatar
  • 109
1 vote
0 answers
61 views

How to force users to change their Windows Hello Pin

We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN. The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
user avatar
  • 13
0 votes
0 answers
44 views

Windows 10 Password Reset Notification

I have a strange issue with one of my end users. The issue is that the Windows Notification for Password Reset pops up for a certain user, daily. The end-user has reset their password via the ...
user avatar
0 votes
1 answer
41 views

How to update Azure AD MS Group Mail and ProxyAddresses field using PowerShell

I need to update email address domain for all Azure AD Groups (of all types Unified, Dynamic ... ) and I am using PowerShell 7 with latest stable AzureAD module. I have an issue with setting new value ...
user avatar
0 votes
0 answers
159 views

Can't ssh to AAD joined Windows 11

Optional feature -> OpenSSH server was installed. Service OpenSSH SSH Server is in 'Running' status. In the same machine, I tried ssh localhost, it gives me Connection reset by ::1 port 22 Event ...
user avatar
  • 101
0 votes
1 answer
104 views

Required roles to enable a device to use ActiveSync on MS365

The tenant I administer has administrative users that aren´t Global Administrators but have a number of roles, including Exchange Administrator, but can´t enable a device to use ActiveSync (the page ...
user avatar
1 vote
2 answers
182 views

MS Azure AD connect & Exchange hybrid deployment

I have a MS Small Business Server 2010 server with Exchange. We have looking to migrate to O365. I deployed a new Windows 2019 server (the SBS machine's UI was painfully slow) and promoted that to the ...
user avatar
  • 13
0 votes
1 answer
34 views

Do I need second domain controller when we use AzureAD hybrid setup?

The subject wraps up my story pretty straight - Do I need second domain controller when we use AzureAD hybrid setup? We have one domain with only one domain controller what is on-prem, and its AD is ...
user avatar
0 votes
0 answers
21 views

Provision groups from two AD forests to AzureAD

We have two AD forests "xprod.com" and "xtest.com". All users are in both of those forests - they are duplicated. There is no trust between the domains. In both forests, the users ...
user avatar
  • 1
3 votes
1 answer
206 views

How to simulate external azure active directory / create testing environment?

We regularly face the situation where access to internal applications (e.g. PowerBI) by external users (guest users in our AAD) need to be troubleshooted (errors in application specific configs). ...
user avatar
0 votes
1 answer
97 views

Local administrator tagged "must change password" when domain user joins azureAD using OOBE

Hi all thanks in advance and sorry if my question is not properly structured, first time I ask instead of just lurk: I have a hybrid on-prem/azureAd environment using dirsync Laptops are imaged with ...
user avatar
1 vote
1 answer
181 views

Disable the Windows 10 Password login option when FIDO in use

Hello Collective intelligence, I have a question that is bugging me, I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
user avatar
0 votes
1 answer
170 views

Pros/cons of service account and service principal in AAD

The official Microsoft docs strongly discourage the practice of user accounts employed as service accounts. Instead, they recommend using service principals or managed identities. Leaving aside MI's ...
user avatar
  • 103
0 votes
1 answer
69 views

Can I use my O365 Custom domain name as my Azure AD Domain Services domain name?

I have an existing O365 tenant with a custom domain name. I also have a couple of VM's running in Azure and for all sorts of reasons I would like to add Azure Active Directory Domain Services. Where ...
user avatar
0 votes
1 answer
367 views

Sync error between windows server AD and Azure AD

I have windows server 2019 OS with AD synced to Azure AD via Azure AD connect sync. I recently changed my domain @mydomain for some of my old users. Unfortunately, I also erroneously changed the ...
user avatar
  • 101
1 vote
0 answers
132 views

Azure storage file share with AD and MacOS

My actual simple infrastructure is composed by a VNET with inside these machines: Windows Server 2019 that acts as AD controller and DNS server, sync with Azure AD. Windows Server 2019 stand alone, ...
user avatar
  • 111
0 votes
0 answers
39 views

Trying to make azure saml work with zendesk idP initiated

We are trying to setup SAML with Azure AD for zendesk when SAML is not the primary (can be JWT and SAML at the same time, we need JWT to be the primary). We basically followed the instruction here: ...
user avatar
0 votes
0 answers
41 views

Azure file sharing and AD how to

I work for a small company, 5 users with Office365 standard license + email with custom domain. We have an Azure account with a couple on VM for some legacy software. We would like to set up a file ...
user avatar
  • 111
0 votes
1 answer
910 views

Register Mac to Azure AD without enrolling in Intune

I am looking to find out if Mac devices can be registered (not joined) to Azure AD. I've tried to research on both Google and this site, but all information I was able to find pertained to joining ...
user avatar
  • 1
0 votes
1 answer
178 views

LDAP bind to Azure Domain Services

I'm testing Azure AD and Azure AD DS and I have some issues to bind to Azure DS using LDAP. I used the default AD tenant in my subscription, so i get a domain foo.onmicrosoft.com. Then I create a ADDS ...
user avatar
0 votes
1 answer
48 views

Can I run an on-premise domain with only Azure AD?

I am looking to upgrade some of the systems for my church and wanted to run some questions. We currently are running on an antiquated version of Windows Server 2008 R2. This server has AD, DNS, users, ...
user avatar
  • 1
0 votes
1 answer
345 views

How to use Azure AD in SaaS multi-tenant application

I have an issue how to use Azure AD in context of my SaaS application. I have a feeling that Azure AD multi-tenant is a different term than SaaS multi-tenant. If I'm wrong, then I hope somebody will ...
user avatar
  • 101
1 vote
0 answers
61 views

Google Federated Azure users can't log in to Windows 10

We've just set up Azure AD and federated it with our G Suite system. I see the provisioned users from G Suite and can log in to Azure and Office with them, no problem. I also have a Windows 10 Pro PC ...
user avatar
  • 11

1
2 3 4 5
11