Questions tagged [azure-active-directory]
Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.
538
questions
0
votes
0
answers
6
views
Tease out extensionAttribute5 with get-mguser
Trying to force myself to start using graph thru powershell since it looks like the AzureAD powershell commandlets are going the way of the dodo at some point. Wondering if there is a way to use get-...
- 11
0
votes
1
answer
7
views
Azure AD B2C and aka.ms/mfasetup
I have an Azure AD tenant and I created an Azure AD B2C tenant for an app that I am building.
The "short link" for MFA setup is https://aka.ms/mfasetup but that allows me to configure MFA ...
- 171
0
votes
0
answers
12
views
Error - Failed To Access Active Directory Failed to access Active Directory while creating resourse Azure Information Protection
I'am trying to give the hability to my users to be able to sync their Microsoft Edge features (such like bookmarks, passwords,...), over their Azure AD accounts, but I am unable to setup Azure ...
- 372
0
votes
0
answers
13
views
Shared folder on AzureAD server accessible to local domain?
We are moving to M/O365 and will need to script pulling attachments from e-mails. Those files will need to go into a shared folder that is accessible by computers on the local domain.
Is this shared ...
- 45
0
votes
1
answer
17
views
Only federate some users in AzureAD and not a whole domain
We want to test a new IDP in our organization ( this IDP is an inhouse SAML-compatible idp ). We are using AzureAD.
If we federate a new domain, we can test the authentication, and it works ( xxx@...
- 99
0
votes
1
answer
33
views
Create a Mail-enabled security groups with Azure AD role assignment?
I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks ...
0
votes
1
answer
26
views
How can push AzureAD identities to on prem ActiveDirectory
Situation is that we have multiple sites (AWS VPCs), each with their own self-managed ADDS domains with no network connectivity between them (by design). We need to provision each sites ADDS users ...
- 101
1
vote
2
answers
26
views
How can I specify an Azure tenant name?
How can I specify an Azure tenant name? I mean {something}.onmicrosoft.com name.
I have tried to register a new Azure tenant a few times and each time I created a new Microsoft account and then a new ...
- 307
0
votes
1
answer
22
views
How do I link Office 365 service to existing Azure AD?
I want to buy a new Office 365 offering but I do not want it to use its own Azure AD, instead I want it to use the Azure AD tenant that I specify.
Is this done at Office 365 creation time or can be ...
- 1
0
votes
0
answers
16
views
Force use of dedicated secondary admin accounts in Intune/AAD environment
Short situation sketch:
I inherited a customer environment where all devices are Azure AD joined and managed via Intune. The Azure AD account with which the user logs on, is local administrator.
I ...
- 1
0
votes
0
answers
26
views
Unable to access specific rest apis due to azure error
My application using spring rest and deployed in Azure server. Created rest apis using spring rest.
Am able to access all rest urls, except in one scenario.
for eg: http://mydomain123.com/api/abc , ...
- 1
0
votes
0
answers
25
views
Federating Google workspace with AAD B2B
I am trying to federate Google Workspace (as IdP) with Azure AD B2B. There seems to be mixed instructions on how to do that. From the Office MS documentation, it said verified domain is not support on ...
google-cloud-platform
0
votes
0
answers
13
views
Blocking Application Installation via Intune or custom OMA-URI for Admin Users
I have 10 systems where only 1 account exists on the Windows machines which is the microsoft work account. There are no local Admin accounts on these systems. I am able to block CMD, RegEdit, ...
- 115
0
votes
1
answer
21
views
Way to convert user account on Windows 10 from on-prem AD to AzureAD?
Many employees are now remote that haven't been in the past. We would like them to start using an AzureAD logon for their laptops instead of user tied to our office's Active Directory system. My ...
- 687
0
votes
0
answers
42
views
802.1x Wireless with certificates for AADJ/Intune devices without user affinity
I can setup certificate distribution and wireless profiles in Intune for devices with user affinity and this works fine. The user account is synchronised with our on site AD server and NPS has an ...
0
votes
0
answers
58
views
Authentication to SonarQube with Azure AD
I have a taks to implement authentication to SonarQube with SAML from Azure AD
We are using SonarQube 8.9.6 LTS with openjdk 11.0.14 OpenJDK Runtime Environment build 11.0.14+9 on Ubuntu 20.04.
I've ...
- 1
0
votes
0
answers
22
views
Azure AD Conditional Access Policy - Require Security Key as Multifactor
I am exploring the Security options for user signin ( specifically admin signin ) to Azure Portal and other Azure App and my requirements is specifically that the user should enter the password and ...
- 101
0
votes
0
answers
15
views
How do I run an app from the command line during an Azure pipeline that accesses Key Vault?
I have a UI automation testing tool that runs from the command line. It uses Azure Key Vault via SecretClient in the source code. This works great for QA people who are running it locally and can log ...
- 101
0
votes
0
answers
155
views
Wrong 'executing account name' on Azure AD joined machines (Windows 11, Autopilot)
Currently we have 'Azure AD Domain Services' activated in our tenant, which is a managed AD through Azure. Data is being synchronised between Azure and the managed AD. We're preparing to migrate away ...
0
votes
0
answers
25
views
Gitlab: Possible to specify roles in Azure AD manifest?
I already use Azure AD for login to Gitlab and now I want to manage roles (Regular user, Admin user) in Azure AD as well and pass them to Gitlab. Roles can be stored in the Azure Manifest, which are ...
- 101
0
votes
0
answers
75
views
Requirements for RDP from Azure AD Registered device
We are a small company (4 users, 7 devices) and have recently moved from a mess of local accounts on our PCs to using Azure AD for Office 365. The plan was to have accounts for each user and for ...
- 101
0
votes
0
answers
114
views
Cannot login with email after joining Azure AD
Let's say my company has an Azure AD "domainx.com".
I used Window 11 Pro and joined my laptop (device not account) to domainx.com. I entered my AAD account information and the machine joined ...
0
votes
0
answers
13
views
Azure Sentinel Alert on below average Log events
I need to create a query that runs against my servers that send logs to Azure Sentinel. I want to get an average say, over the last 7 days, and if the current 24 hour window is below the average by a ...
- 146
0
votes
0
answers
9
views
Password less authentication (MFA) in Azure AD is asking to input number - How can we prompt for one?
We would like to have password less MFA in Azure provide a list of numbers to choose from instead of having to type in a number.
Is there a configuration in Azure for this somewhere?
- 101
-1
votes
1
answer
29
views
Is it possible for CodeTwo to choose a server-side signature based on the mail's language?
I wasn't sure if this was the correct place for this question but here goes.
I want CodeTwo (With Azure) to fetch a certain signature based on the mail's language content.
Is this possible? Or am I ...
0
votes
1
answer
30
views
What is the default RBAC scope used when assigning a role in Azure with the CLI?
This is the documentation for the az role assignment create command: https://docs.microsoft.com/en-us/cli/azure/role/assignment?view=azure-cli-latest#az-role-assignment-create
--score is an optional ...
- 109
0
votes
1
answer
34
views
Azure Cloud Zero Trust Access (App Registration?)
Working with the Azure Cloud:
I am looking into a solution where I can have users authenticate via Azure AD so they can access an app hosted on a virtual machine. This is something very similar to ...
-1
votes
1
answer
48
views
How do companies make sure resources created by an employee are not deleted when he is fired in Azure?
Correct me if I am wrong, but my understanding is that when an Azure account is deleted, all associated resources are also gone. This makes sense because else I would keep being charged for using ...
- 109
1
vote
0
answers
61
views
How to force users to change their Windows Hello Pin
We changed our password policy in the Microsoft Endpoint Manager and now require a longer PIN.
The issue is, in testing we noticed you're only asked to change the Windows Hello PIN, when logging in ...
- 13
0
votes
0
answers
44
views
Windows 10 Password Reset Notification
I have a strange issue with one of my end users. The issue is that the Windows Notification for Password Reset pops up for a certain user, daily. The end-user has reset their password via the ...
- 35
0
votes
1
answer
41
views
How to update Azure AD MS Group Mail and ProxyAddresses field using PowerShell
I need to update email address domain for all Azure AD Groups (of all types Unified, Dynamic ... ) and I am using PowerShell 7 with latest stable AzureAD module.
I have an issue with setting new value ...
- 254
0
votes
0
answers
159
views
Can't ssh to AAD joined Windows 11
Optional feature -> OpenSSH server was installed. Service OpenSSH SSH Server is in 'Running' status.
In the same machine, I tried ssh localhost, it gives me
Connection reset by ::1 port 22
Event ...
- 101
0
votes
1
answer
104
views
Required roles to enable a device to use ActiveSync on MS365
The tenant I administer has administrative users that aren´t Global Administrators but have a number of roles, including Exchange Administrator, but can´t enable a device to use ActiveSync (the page ...
- 1
1
vote
2
answers
182
views
MS Azure AD connect & Exchange hybrid deployment
I have a MS Small Business Server 2010 server with Exchange. We have looking to migrate to O365.
I deployed a new Windows 2019 server (the SBS machine's UI was painfully slow) and promoted that to the ...
- 13
0
votes
1
answer
34
views
Do I need second domain controller when we use AzureAD hybrid setup?
The subject wraps up my story pretty straight - Do I need second domain controller when we use AzureAD hybrid setup?
We have one domain with only one domain controller what is on-prem, and its AD is ...
0
votes
0
answers
21
views
Provision groups from two AD forests to AzureAD
We have two AD forests "xprod.com" and "xtest.com". All users are in both of those forests - they are duplicated. There is no trust between the domains.
In both forests, the users ...
- 1
3
votes
1
answer
206
views
How to simulate external azure active directory / create testing environment?
We regularly face the situation where access to internal applications (e.g. PowerBI) by external users (guest users in our AAD) need to be troubleshooted (errors in application specific configs). ...
- 133
0
votes
1
answer
97
views
Local administrator tagged "must change password" when domain user joins azureAD using OOBE
Hi all thanks in advance and sorry if my question is not properly structured, first time I ask instead of just lurk:
I have a hybrid on-prem/azureAd environment using dirsync
Laptops are imaged with ...
1
vote
1
answer
181
views
Disable the Windows 10 Password login option when FIDO in use
Hello Collective intelligence,
I have a question that is bugging me,
I have a Yubikey 5C setup in Azure AD with passwordless auth and registered to my account, I can log into the PC using the FIDO key ...
0
votes
1
answer
170
views
Pros/cons of service account and service principal in AAD
The official Microsoft docs strongly discourage the practice of user accounts employed as service accounts. Instead, they recommend using service principals or managed identities.
Leaving aside MI's ...
- 103
0
votes
1
answer
69
views
Can I use my O365 Custom domain name as my Azure AD Domain Services domain name?
I have an existing O365 tenant with a custom domain name.
I also have a couple of VM's running in Azure and for all sorts of reasons I would like to add Azure Active Directory Domain Services.
Where ...
- 18
0
votes
1
answer
367
views
Sync error between windows server AD and Azure AD
I have windows server 2019 OS with AD synced to Azure AD via Azure AD connect sync.
I recently changed my domain @mydomain for some of my old users. Unfortunately, I also erroneously changed the ...
- 101
1
vote
0
answers
132
views
Azure storage file share with AD and MacOS
My actual simple infrastructure is composed by a VNET with inside these machines:
Windows Server 2019 that acts as AD controller and DNS server, sync with Azure AD.
Windows Server 2019 stand alone, ...
- 111
0
votes
0
answers
39
views
Trying to make azure saml work with zendesk idP initiated
We are trying to setup SAML with Azure AD for zendesk when SAML is not the primary (can be JWT and SAML at the same time, we need JWT to be the primary).
We basically followed the instruction here: ...
- 101
0
votes
0
answers
41
views
Azure file sharing and AD how to
I work for a small company, 5 users with Office365 standard license + email with custom domain.
We have an Azure account with a couple on VM for some legacy software.
We would like to set up a file ...
- 111
0
votes
1
answer
910
views
Register Mac to Azure AD without enrolling in Intune
I am looking to find out if Mac devices can be registered (not joined) to Azure AD. I've tried to research on both Google and this site, but all information I was able to find pertained to joining ...
- 1
0
votes
1
answer
178
views
LDAP bind to Azure Domain Services
I'm testing Azure AD and Azure AD DS and I have some issues to bind to Azure DS using LDAP.
I used the default AD tenant in my subscription, so i get a domain foo.onmicrosoft.com. Then I create a ADDS ...
0
votes
1
answer
48
views
Can I run an on-premise domain with only Azure AD?
I am looking to upgrade some of the systems for my church and wanted to run some questions. We currently are running on an antiquated version of Windows Server 2008 R2. This server has AD, DNS, users, ...
- 1
0
votes
1
answer
345
views
How to use Azure AD in SaaS multi-tenant application
I have an issue how to use Azure AD in context of my SaaS application. I have a feeling that Azure AD multi-tenant is a different term than SaaS multi-tenant. If I'm wrong, then I hope somebody will ...
- 101
1
vote
0
answers
61
views
Google Federated Azure users can't log in to Windows 10
We've just set up Azure AD and federated it with our G Suite system. I see the provisioned users from G Suite and can log in to Azure and Office with them, no problem.
I also have a Windows 10 Pro PC ...
- 11