Questions tagged [azure-active-directory]

Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.

Filter by
Sorted by
Tagged with
1 vote
1 answer
22 views

Azure equivalent for logon script or Group Policy to launch programs on user login

We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
SKidd's user avatar
  • 43
1 vote
0 answers
16 views

Hybrid Azure AD Join - Not joining correctly

Another day, another Hybrid Azure AD Join issue. Having set up Hybrid Join, it looked like it was working.  The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
AngryDog's user avatar
0 votes
0 answers
14 views

Hybrid AD Joined and Autopilot

I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
AngryDog's user avatar
0 votes
0 answers
22 views

hybrid azure ad join devices

We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
AngryDog's user avatar
0 votes
0 answers
53 views

Which service principal role will provide the minimum permissions necessary to automate installation of a website certificate?

I wish to grant a third-party application API access to my Azure tenant for purposes of installing a TLS certificate on a certain website ("App Service," in Azure terminology). However, ...
InteXX's user avatar
  • 753
-1 votes
0 answers
22 views

Microsoft Nonprofit pricing vs Business pricing is there a difference in features provided? [duplicate]

I want to understand if there is any difference between Non-Profit vs Business licensing for Microsoft products. Is there a difference in the features that are offered? I've looked at their FAQ: https:...
13months's user avatar
0 votes
0 answers
27 views

Access multple tenants as Global Administrator with principal from single tenant (PowerShell 7)

My goal here is to be able to use the service principal of an Enterprise Application in source tenant to authenticate towards/connect to destination tenants as Global Administrator. In source tenant I ...
Tedd Hansen's user avatar
0 votes
0 answers
48 views

Integrate PowerDNS into Windows DC's DNS, use same domain

We have the following setup: dc01.our.domain 10.10.10.101 dc02.our.domain 10.10.10.102 phpipam.our.domain 10.10.10.250 We need all our hosts to use our DC's as the primary and secondary DNS servers, ...
Dave's user avatar
  • 209
0 votes
1 answer
27 views

How to configure the Azure AD 'Security Group' membership policy in the Azure AD Portal?

In my Azure AD tenant that has an active Azure AD Premium 2 license, I have enabled Self-Service Group Management. Users are able to create security groups and then configure the membership policy ...
Daniel's user avatar
  • 6,910
0 votes
0 answers
86 views

azure app registration redirect uri not working for a spa application but only for one server

m a little stumped on this and just wondering if anyone had any ideas. I have registered in azure an application with 3 spa redirects It is a .net core react application http://localhost:3000/eem/ (...
Bryan Dellinger's user avatar
0 votes
0 answers
89 views

Rdweb and Azure application proxy SSO

So for one of our customers we have moved one of their legacy application (non-web app) to azure and made it available through an RDgateway and azure application proxy. As descibed here: microsoft ...
iWantToknow's user avatar
0 votes
1 answer
51 views

Convert AD-integrated DNS zones to Primary DNS zones

We have inherited a domain with 2008 R2 domain controllers running DNS on them. We want to add Windows Server 2019 to the domain then demote the 2008 R2 domain controllers to just DNS servers. We are ...
Glenn Dalton's user avatar
0 votes
1 answer
26 views

No longer able to forward emails from exchange online

I have a couple of developers helping me out with a project so I've given them access to my teams so we can collaborate. I am in Office 365 and exchange online. Last summer I set up forwarding on ...
Zonus's user avatar
  • 203
0 votes
1 answer
39 views

Unable to sign in to Microsoft Learn

As of around February 2023, only when our forward web proxy solution is enabled, signing in to a Microsoft Account (personal / consumer) works fine in general (e.g., at https://login.live.com/) except ...
mythofechelon's user avatar
0 votes
0 answers
29 views

Cannot delete Azure Active Directory Tenant

I'm attempting to delete an unused Azure Active Directory Tenant. All initial checks have passed: However, when I click "Delete", I get a popup saying "Unable to delete tenant. Known ...
Hannah Vernon's user avatar
1 vote
1 answer
77 views

Provision Azure AD from Google Workspace

When trying to set up Azure AD and Google Workspace integration it seems that all suggested setups assume that one want to use AD to administrate users. We are using Google Workspace as our source of ...
Rohde Fischer's user avatar
0 votes
0 answers
52 views

How to define custom Azure AD Conditional Access policy for blob service on specific Storage Account?

Good day, Is it possible to define a Conditional Access policy regulating access to a blob service of a particular Storage Account? Let's say, our general policy is too restrictive (say, it requires ...
Cat Mucius's user avatar
0 votes
0 answers
21 views

VisualSVN on Azure VM using integrated windows authentication and office users

We have a VisualSVN server set up on an Azure VM running Windows Server 2022 Datacenter Azure Edition. Our windows users are set up on office365 which I understand has its own active directory. Is ...
hanz's user avatar
  • 1
-1 votes
1 answer
79 views

why active directory computer object has machine password?

The active directory computer object (ie machine object) also have password , as far as i know only the user's logon name and users password is used when logging into the domain joined computer ? But ...
ironmanAJ's user avatar
0 votes
1 answer
29 views

Azure B2C - Custom policies - Replacing Let's Encrypt certificate for a Comodo/Sectigo certificate not allowed

I have an Azure B2C tenant which uses custom policies to connect to our own API. The policy is currently provisioned with a *.something.dev certificate and expires every 3 months. The plan is to ...
Rob's user avatar
  • 147
0 votes
0 answers
72 views

Azure AD Credentials With On Premise VM and SSAS Tabular Cube

I have a Azure VM that I've joined to my Azure AD, works great. I've installed (Development Edition SQL Server 2022) SSAS Tabular on this server using the local admin account and would like to use ...
David Rogers's user avatar
-1 votes
1 answer
106 views

How to sign out of a specific session for a Microsoft Account?

If I am logged into a Microsoft Account (e.g. Office 365) in many places, and I want to end an active login session that is specific, but not end ALL active login sessions, how do I actually do that? ...
A X's user avatar
  • 459
0 votes
1 answer
91 views

Azure AD B2C on backend or front end?

I have a service oriented application where the fornt end is a NextJs application and the backend is a .net core API project. I want to use Azure AD B2C to provide Authentication. Should I configure ...
demu's user avatar
  • 1
-2 votes
2 answers
273 views

Teams Guest users cannot bypass the lobby without the organizer, even though "Everyone" is selected in Meeting Options

In my personal MS 365 Tenant (Business Basic subscription), when I invite external users to a Teams meeting, they can join the meeting, but only after I, the organizer, join. I would like them to be ...
Conrad's user avatar
  • 304
0 votes
0 answers
21 views

IPsec Tunnel to Vendor with Azure AD

On Prem AD connected to Azure AD connect. A vendor we are using requires an IPsec tunnel to a DC on their side to then create a trust to our on Prem AD. Problem is, their router is not compatible with ...
EastCoast2234's user avatar
0 votes
0 answers
11 views

Gsuit user to auto sync with adazure so we can adazuredevops can do SSO

Current Scenario 1 - Gsuit basic users 2 - ADAzure free account(Not have any P1 or P2 license) 3 - Azuredevops on cloud We need to do SSO for Azuredevops on cloud from gsuit all user or selected ...
Patel Punit's user avatar
0 votes
0 answers
43 views

On-prem Services box for otherwise Azure AD environment, after decom of legacy on-prem AD domain

Our organization is currently in the middle phase of Azure migration, using AD Connect to sync all user accounts from local AD to Azure AD with all endpoints joined directly to Azure AD. We're trying ...
Matthew Flook's user avatar
0 votes
0 answers
288 views

On-premise Windows Server 2016-2019 non AD Join to Azure AD

I have Azure AD for my users, so far, so good, and i want to create a File Server. I have 3 VM's at the moment, Win Server 2016 Standard, Win Server 2019 Standard and Win Server 2019 Datacenter. Those ...
Operon IT's user avatar
0 votes
0 answers
59 views

Nginx proxy forward to Azure Analysis Service

Problem: From on-premises computers I need to be able to login to Azure Analysis Service. Since AAS is publically available my split-tunnel VPN configured in on-prem computer forwards the request to ...
Marci-man's user avatar
  • 101
1 vote
0 answers
267 views

Transfer Azure subscription transfer from one tenant to another tenant

I am working on a discovery phase for my client, who is looking to migrate subscriptions from one AD tenant to another. Basically, I would like to know what all resource types are truly impacted and ...
Joy1979's user avatar
  • 111
1 vote
0 answers
146 views

Security Key Hybrid Azure AD

Environment: Windows 11, Server 2016, Azure AD Free. Problem: Your credentials could not be verified. (0xc000005f) I am trying to activate fido2 security key in my domain. The key which I am using ...
Stody's user avatar
  • 11
0 votes
3 answers
180 views

Reset MFA for user in B2C tenant

I have an account that is linked with multiple Azure tenants - one normal one, and a few B2C tenants. All of which have MFA registered. I know how to update my main tenant MFA - but I can't see any ...
Dan's user avatar
  • 203
0 votes
1 answer
368 views

Powershell script to export information to a CSV file

I am trying to figure out why Business Phone is not populating in the report. Any assistance with be greatly appreciated # Connect to AzureAD Connect-AzureAD # Get all Azure AD users $AzADUsers = ...
Chris's user avatar
  • 1
3 votes
0 answers
667 views

Change Windows from KMS client to Azure AD activation?

Is there a known way to change existing Windows 10/11 devices from KMS client activation to Azure AD Education A3 / A5 or Enterprise E3 / E5 license activation? Apparently when Windows 10/11 devices ...
Dale Mahalko's user avatar
1 vote
1 answer
138 views

Outlook won't authenticate with Exchange Online

This is a pure M365 environment. No hybrid, 5 of 6 users are working as expected. 1 of 6 is unable to sign in via Outlook for Windows Desktop. MS Mail/Andoird Outlook/Outlook for Web are all OK and ...
Patrick's user avatar
  • 1,280
1 vote
1 answer
405 views

Cannot connect to Azure Files share

I have set up an Azure Files share with Azure AD Kerberos as the authentication source. I get the error below when running the connection script (Active Directory authentication) on an end user's PC. ...
Ash's user avatar
  • 458
0 votes
0 answers
88 views

Custom VHD with Azure Marketplace Baseline Will Not Join Azure AD Domain

My goal is to upload a customized VHD into our cloud-only USGov environment and turn it into an Azure AD-joined template. My challenge is the option Login with Azure AD is disabled. The image is a ...
MC-AEG's user avatar
  • 1
1 vote
0 answers
39 views

Switching from ADFS to password sync, how to check dependencies

Is there a way to check if there is any dependencies on swichting from ADFS => PHS? We are doing migration of another company into ours, and in that regard want to get rid of their ADFS. ...
Mathias Rønnow Nørtoft's user avatar
0 votes
1 answer
435 views

Is it possible to fully undelete an Azure AD hybrid user account? If so, how?

Whereas this article says a deleted AD user only needs to be restored from the recycle bin for its Azure AD object to aslo be restored. For us, when an AD user object is undeleted, Azure AD Connect ...
Nathan Hartley's user avatar
1 vote
0 answers
74 views

Set default settings for all roles in Azure PIM

We've just started the process of making roles eligible for assignment in Azure PIM. We have a large collection of resources, each with roles that we want to individually make a user eligible to ...
RetractedRedacted's user avatar
0 votes
1 answer
156 views

Cached windows domain credentials issue

I need to delete or lock out a single cached domain account on a local pc. If I disable the cached logon domain information I will lockout me from the pc if I am not in the office. Is there a way to ...
solonely's user avatar
1 vote
1 answer
3k views

Windows 11 Home - no option to "join this device to Azure AD"

I have a work computer currently running Windows 11 Home. (I will update it to Pro/Enterprise, but I need to get this figured out first.) I need to "set up a work or school account" by ...
Mathew Alden's user avatar
-1 votes
1 answer
96 views

Azure AD Group users management through a 3rd party software

My organization is fully on Azure AD. Access to the applications in the organization and roles in the applications are managed by AAD groups. Is there a 3rd party application or an open source project ...
Adam's user avatar
  • 161
-1 votes
1 answer
221 views

Azure AD B2C use case - SSO between 2 applications

I have 2 applications . Application 1 : A .NET backend / Angular frontend app with AD B2C for authentication. (This application is already developed and working.) Application 2 : A similar stack ...
user14013917's user avatar
0 votes
0 answers
101 views

AWX: prevent access from outside organizations

After setting up login via Azure AD in AWX, we find that people from other organizations are able to log in, too. After creating an organization map according to https://docs.ansible.com/ansible-tower/...
Marcus Ilgner's user avatar
-1 votes
1 answer
815 views

Windows Server 2022 join Azure AD Domain Services over VPN - How to do this?

I have servers spread across multiple on-premises locations that I want to join to Azure AD DS, and I don't want to setup ADFS because it is too much work. So here is what I am thinking: Use VPN to ...
A X's user avatar
  • 459
0 votes
1 answer
486 views

How can a Azure-AD joined device log in to onpremise Active Directory (for Windows-authentication and SQL-server)

I don't understand how to handle this case: A laptop is joined to Azure-AD and the user logs in with a PIN-code (for example). This part works fine. Now the user needs to work with the on-premise ...
roberth's user avatar
  • 133
0 votes
2 answers
105 views

Azure AD Publisher verification - This capability is not supported in an email-verified tenant

I have created an application in Azure AD and already have verified MPN ID to associate with this application. When I add MPN ID I get the error: This capability is not supported in an email-verified ...
Coder12345's user avatar
0 votes
1 answer
76 views

Synchronise Office 365 Group Members

Question: I have a list of internal users who are assigned to an office 365 group A. We now want to make other office 365 groups (B, C, ...) that will inherit/synchronize all users from group A and ...
CuriousGoat's user avatar
-1 votes
1 answer
68 views

How to sync from azure cloud to a local server

I'm new to this company which only has an azure active directory in the cloud. I'm tasked with getting azure active directories from the cloud to sync to my local server. All the guides I've read ...
13months's user avatar

1
2 3 4 5
12