Questions tagged [azure-active-directory]
Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.
599
questions
1
vote
1
answer
22
views
Azure equivalent for logon script or Group Policy to launch programs on user login
We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
- 43
1
vote
0
answers
16
views
Hybrid Azure AD Join - Not joining correctly
Another day, another Hybrid Azure AD Join issue.
Having set up Hybrid Join, it looked like it was working. The device I onboarded via autopilot was created in "on-prem" AD, was in Azure AD, ...
- 11
0
votes
0
answers
14
views
Hybrid AD Joined and Autopilot
I've been working on setting up our Autopilot onboarding with our Hybrid AD. I have managed to join a device to the domain successfully, but I have noticed some differences against when we do this ...
- 11
0
votes
0
answers
22
views
hybrid azure ad join devices
We have a hybrid active directory set up between our servers held in a DC and our Azure AD.I am currently working on the configuration of our Autopilot and Intune deployment. At the moment we deploy ...
- 11
0
votes
0
answers
53
views
Which service principal role will provide the minimum permissions necessary to automate installation of a website certificate?
I wish to grant a third-party application API access to my Azure tenant for purposes of installing a TLS certificate on a certain website ("App Service," in Azure terminology).
However, ...
- 753
-1
votes
0
answers
22
views
Microsoft Nonprofit pricing vs Business pricing is there a difference in features provided? [duplicate]
I want to understand if there is any difference between Non-Profit vs Business licensing for Microsoft products. Is there a difference in the features that are offered?
I've looked at their FAQ: https:...
- 1
0
votes
0
answers
27
views
Access multple tenants as Global Administrator with principal from single tenant (PowerShell 7)
My goal here is to be able to use the service principal of an Enterprise Application in source tenant to authenticate towards/connect to destination tenants as Global Administrator.
In source tenant I ...
- 664
0
votes
0
answers
48
views
Integrate PowerDNS into Windows DC's DNS, use same domain
We have the following setup:
dc01.our.domain 10.10.10.101
dc02.our.domain 10.10.10.102
phpipam.our.domain 10.10.10.250
We need all our hosts to use our DC's as the primary and secondary DNS servers, ...
- 209
0
votes
1
answer
27
views
How to configure the Azure AD 'Security Group' membership policy in the Azure AD Portal?
In my Azure AD tenant that has an active Azure AD Premium 2 license, I have enabled Self-Service Group Management.
Users are able to create security groups and then configure the membership policy ...
- 6,910
0
votes
0
answers
86
views
azure app registration redirect uri not working for a spa application but only for one server
m a little stumped on this and just wondering if anyone had any ideas.
I have registered in azure an application with 3 spa redirects It is a .net core react application
http://localhost:3000/eem/ (...
- 101
0
votes
0
answers
89
views
Rdweb and Azure application proxy SSO
So for one of our customers we have moved one of their legacy application (non-web app) to azure and made it available through an RDgateway and azure application proxy. As descibed here: microsoft ...
0
votes
1
answer
51
views
Convert AD-integrated DNS zones to Primary DNS zones
We have inherited a domain with 2008 R2 domain controllers running DNS on them. We want to add Windows Server 2019 to the domain then demote the 2008 R2 domain controllers to just DNS servers. We are ...
0
votes
1
answer
26
views
No longer able to forward emails from exchange online
I have a couple of developers helping me out with a project so I've given them access to my teams so we can collaborate. I am in Office 365 and exchange online.
Last summer I set up forwarding on ...
- 203
0
votes
1
answer
39
views
Unable to sign in to Microsoft Learn
As of around February 2023, only when our forward web proxy solution is enabled, signing in to a Microsoft Account (personal / consumer) works fine in general (e.g., at https://login.live.com/) except ...
- 905
0
votes
0
answers
29
views
Cannot delete Azure Active Directory Tenant
I'm attempting to delete an unused Azure Active Directory Tenant.
All initial checks have passed:
However, when I click "Delete", I get a popup saying "Unable to delete tenant. Known ...
- 185
1
vote
1
answer
77
views
Provision Azure AD from Google Workspace
When trying to set up Azure AD and Google Workspace integration it seems that all suggested setups assume that one want to use AD to administrate users. We are using Google Workspace as our source of ...
0
votes
0
answers
52
views
How to define custom Azure AD Conditional Access policy for blob service on specific Storage Account?
Good day,
Is it possible to define a Conditional Access policy regulating access to a blob service of a particular Storage Account?
Let's say, our general policy is too restrictive (say, it requires ...
- 155
0
votes
0
answers
21
views
VisualSVN on Azure VM using integrated windows authentication and office users
We have a VisualSVN server set up on an Azure VM running Windows Server 2022 Datacenter Azure Edition. Our windows users are set up on office365 which I understand has its own active directory. Is ...
- 1
-1
votes
1
answer
79
views
why active directory computer object has machine password?
The active directory computer object (ie machine object) also have password , as far as i know only the user's logon name and users password is used when logging into the domain joined computer ? But ...
0
votes
1
answer
29
views
Azure B2C - Custom policies - Replacing Let's Encrypt certificate for a Comodo/Sectigo certificate not allowed
I have an Azure B2C tenant which uses custom policies to connect to our own API.
The policy is currently provisioned with a *.something.dev certificate and expires every 3 months.
The plan is to ...
- 147
0
votes
0
answers
72
views
Azure AD Credentials With On Premise VM and SSAS Tabular Cube
I have a Azure VM that I've joined to my Azure AD, works great. I've installed (Development Edition SQL Server 2022) SSAS Tabular on this server using the local admin account and would like to use ...
- 215
-1
votes
1
answer
106
views
How to sign out of a specific session for a Microsoft Account?
If I am logged into a Microsoft Account (e.g. Office 365) in many places, and I want to end an active login session that is specific, but not end ALL active login sessions, how do I actually do that?
...
- 459
0
votes
1
answer
91
views
Azure AD B2C on backend or front end?
I have a service oriented application where the fornt end is a NextJs application and the backend is a .net core API project.
I want to use Azure AD B2C to provide Authentication.
Should I configure ...
- 1
-2
votes
2
answers
273
views
Teams Guest users cannot bypass the lobby without the organizer, even though "Everyone" is selected in Meeting Options
In my personal MS 365 Tenant (Business Basic subscription), when I invite external users to a Teams meeting, they can join the meeting, but only after I, the organizer, join. I would like them to be ...
- 304
0
votes
0
answers
21
views
IPsec Tunnel to Vendor with Azure AD
On Prem AD connected to Azure AD connect. A vendor we are using requires an IPsec tunnel to a DC on their side to then create a trust to our on Prem AD. Problem is, their router is not compatible with ...
0
votes
0
answers
11
views
Gsuit user to auto sync with adazure so we can adazuredevops can do SSO
Current Scenario
1 - Gsuit basic users
2 - ADAzure free account(Not have any P1 or P2 license)
3 - Azuredevops on cloud
We need to do SSO for Azuredevops on cloud from gsuit all user or selected ...
0
votes
0
answers
43
views
On-prem Services box for otherwise Azure AD environment, after decom of legacy on-prem AD domain
Our organization is currently in the middle phase of Azure migration, using AD Connect to sync all user accounts from local AD to Azure AD with all endpoints joined directly to Azure AD. We're trying ...
- 171
0
votes
0
answers
288
views
On-premise Windows Server 2016-2019 non AD Join to Azure AD
I have Azure AD for my users, so far, so good, and i want to create a File Server. I have 3 VM's at the moment, Win Server 2016 Standard, Win Server 2019 Standard and Win Server 2019 Datacenter. Those ...
0
votes
0
answers
59
views
Nginx proxy forward to Azure Analysis Service
Problem:
From on-premises computers I need to be able to login to Azure Analysis Service.
Since AAS is publically available my split-tunnel VPN configured in on-prem computer forwards the request to ...
- 101
1
vote
0
answers
267
views
Transfer Azure subscription transfer from one tenant to another tenant
I am working on a discovery phase for my client, who is looking to migrate subscriptions from one AD tenant to another.
Basically, I would like to know what all resource types are truly impacted and ...
- 111
1
vote
0
answers
146
views
Security Key Hybrid Azure AD
Environment: Windows 11, Server 2016, Azure AD Free.
Problem: Your credentials could not be verified. (0xc000005f)
I am trying to activate fido2 security key in my domain.
The key which I am using ...
- 11
0
votes
3
answers
180
views
Reset MFA for user in B2C tenant
I have an account that is linked with multiple Azure tenants - one normal one, and a few B2C tenants. All of which have MFA registered. I know how to update my main tenant MFA - but I can't see any ...
- 203
0
votes
1
answer
368
views
Powershell script to export information to a CSV file
I am trying to figure out why Business Phone is not populating in the report. Any assistance with be greatly appreciated
# Connect to AzureAD
Connect-AzureAD
# Get all Azure AD users
$AzADUsers = ...
- 1
3
votes
0
answers
667
views
Change Windows from KMS client to Azure AD activation?
Is there a known way to change existing Windows 10/11 devices from KMS client activation to Azure AD Education A3 / A5 or Enterprise E3 / E5 license activation?
Apparently when Windows 10/11 devices ...
- 755
1
vote
1
answer
138
views
Outlook won't authenticate with Exchange Online
This is a pure M365 environment. No hybrid, 5 of 6 users are working as expected.
1 of 6 is unable to sign in via Outlook for Windows Desktop.
MS Mail/Andoird Outlook/Outlook for Web are all OK and ...
- 1,280
1
vote
1
answer
405
views
Cannot connect to Azure Files share
I have set up an Azure Files share with Azure AD Kerberos as the authentication source.
I get the error below when running the connection script (Active Directory authentication) on an end user's PC.
...
- 458
0
votes
0
answers
88
views
Custom VHD with Azure Marketplace Baseline Will Not Join Azure AD Domain
My goal is to upload a customized VHD into our cloud-only USGov environment and turn it into an Azure AD-joined template. My challenge is the option Login with Azure AD is disabled.
The image is a ...
- 1
1
vote
0
answers
39
views
Switching from ADFS to password sync, how to check dependencies
Is there a way to check if there is any dependencies on swichting from ADFS => PHS?
We are doing migration of another company into ours, and in that regard want to get rid of their ADFS.
...
0
votes
1
answer
435
views
Is it possible to fully undelete an Azure AD hybrid user account? If so, how?
Whereas this article says a deleted AD user only needs to be restored from the recycle bin for its Azure AD object to aslo be restored. For us, when an AD user object is undeleted, Azure AD Connect ...
- 1,658
1
vote
0
answers
74
views
Set default settings for all roles in Azure PIM
We've just started the process of making roles eligible for assignment in Azure PIM. We have a large collection of resources, each with roles that we want to individually make a user eligible to ...
0
votes
1
answer
156
views
Cached windows domain credentials issue
I need to delete or lock out a single cached domain account on a local pc. If I disable the cached logon domain information I will lockout me from the pc if I am not in the office. Is there a way to ...
- 11
1
vote
1
answer
3k
views
Windows 11 Home - no option to "join this device to Azure AD"
I have a work computer currently running Windows 11 Home. (I will update it to Pro/Enterprise, but I need to get this figured out first.) I need to "set up a work or school account" by ...
- 257
-1
votes
1
answer
96
views
Azure AD Group users management through a 3rd party software
My organization is fully on Azure AD. Access to the applications in the organization and roles in the applications are managed by AAD groups.
Is there a 3rd party application or an open source project ...
- 161
-1
votes
1
answer
221
views
Azure AD B2C use case - SSO between 2 applications
I have 2 applications .
Application 1 : A .NET backend / Angular frontend app with AD B2C for authentication. (This application is already developed and working.)
Application 2 : A similar stack ...
0
votes
0
answers
101
views
AWX: prevent access from outside organizations
After setting up login via Azure AD in AWX, we find that people from other organizations are able to log in, too.
After creating an organization map according to https://docs.ansible.com/ansible-tower/...
-1
votes
1
answer
815
views
Windows Server 2022 join Azure AD Domain Services over VPN - How to do this?
I have servers spread across multiple on-premises locations that I want to join to Azure AD DS, and I don't want to setup ADFS because it is too much work.
So here is what I am thinking:
Use VPN to ...
- 459
0
votes
1
answer
486
views
How can a Azure-AD joined device log in to onpremise Active Directory (for Windows-authentication and SQL-server)
I don't understand how to handle this case:
A laptop is joined to Azure-AD and the user logs in with a PIN-code (for example). This part works fine.
Now the user needs to work with the on-premise ...
- 133
0
votes
2
answers
105
views
Azure AD Publisher verification - This capability is not supported in an email-verified tenant
I have created an application in Azure AD and already have verified MPN ID to associate with this application.
When I add MPN ID I get the error:
This capability is not supported in an email-verified ...
- 119
0
votes
1
answer
76
views
Synchronise Office 365 Group Members
Question:
I have a list of internal users who are assigned to an office 365 group A. We now want to make other office 365 groups (B, C, ...) that will inherit/synchronize all users from group A and ...
-1
votes
1
answer
68
views
How to sync from azure cloud to a local server
I'm new to this company which only has an azure active directory in the cloud.
I'm tasked with getting azure active directories from the cloud to sync to my local server.
All the guides I've read ...
- 1