Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [azure-active-directory]

Azure Active Directory is a Microsoft platform for handling identity and authorization requirements for cloud applications.

0
votes
0answers
7 views

Using a Windows Authentication protocol on a remote site without local domain services

The scenario is domain-A is a Windows domain with hybrid AD services, including on prem AD, ADFS and Azure AD with the possibility of adding Azure AD domain services. Domain-B has no Windows domain ...
1
vote
0answers
17 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
1
vote
0answers
17 views

Multiple Azure AD Domains and Office 365

I have two active directory domains (C1.com and C2.com) in separate cities that are not in the same forest. C1.com and C2.com are synced to separate Azure subscriptions using Azure AD Connect. I use ...
1
vote
1answer
22 views

How can I set up the azure active directory for azure DevOps? what is the difference between IAM and Active Directory?

Currently, I am trying to establish Azure DevOps pipeline to deploy into Azure App service. While Creating Pipeline it is looking for Azure Subscription. After selecting Azure Subscription it is ...
1
vote
0answers
20 views

Exchange Online - how to manage no-longer synchronised account?

So we've got a setup of on-prem AD and EX Online. They are synchronised by aad connect and we've expanded the schema in AD, so we have the attribute to hide users from GAL. Now, we've parted with a ...
1
vote
0answers
45 views

Choosing the right Active Directory solution for my network

I currently manage my users "manually" on a network that began with 3 people and 3 computers. Now I have 4 users with their own computer, 4 computers used by parttime people and a second site in ...
0
votes
1answer
18 views

Change directory for azure subscription back to default

My Azure subscription is associated with an MS Live account, which was later also included in the AD Directory of my old company, but although apparently disabled there when I left was still available ...
0
votes
1answer
19 views

Using Azure Conditional Access to control downloading from SharePoint/OneDrive

I'm trying to use Azure Conditional Access to control downloading from SharePoint/OneDrive, but i'm completely new to this. I wish to be able to use OneDrive (the business app) AND to download/sync ...
1
vote
0answers
9 views

Combine / Allow access between 2 Azure / Office 365 Domains / Tenants

Apologies if this is not the correct place to ask this question. After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
1
vote
3answers
36 views

Azure AD Connect remediation for O365 (how to setup test domain?)

I need to stand up a test domain to try and fix accounts that have been synced into AAD. I have had zero experience with Azure AD or O365, so I'm not sure how to proceed. A previous admin setup our ...
0
votes
2answers
32 views

Active Directory and Domain on Azure Standalone machine

Hi serverfault experts, I'm starting to create a Windows VM on Azure to demonstrate a system running on it. This system does require its machine to be member of a valid Windows Domain (cannot use ...
0
votes
1answer
20 views

Enable a guest user to access Azure Data Factory

What I want to achieve is to give access to Azure Data Factory to a guest user. I have invited a guest user and the guest user has accepted. When navigating to https://adf.azure.com the guest user ...
0
votes
0answers
4 views

Azure AD Multi Factor and Terms Agreement not working for B2B

I have 3 SSO SAML 2.0 apps working 100% via direct link and via myapps.microsoft.com, however multi-factor and terms of agreement are not working, however the MFA and Terms are not prompting. ...
1
vote
1answer
63 views

Apply Computer Policy changes at login / Apply Computer Policy for specific users [closed]

I have an request to apply computer policy changes to a specific set of users. For example, I want a specific windows feature (Allow Cortana) available to members of a security group (CortanaUsers). ...
0
votes
1answer
46 views

How to grant a full read only Azure AD role to a user?

I would like to grant someone a full read only access to all resources for an Azure subscription. I've reviewed the built-in roles and nothing fits the bill - e.g. security reader comes close but can'...
1
vote
1answer
44 views

Why will Azure Active Directory Connect setup not allow us to 'Add Directory'?

When we get to the 'Connect your directories' screen in the setup process the forest is auto populated with the correct FDQN of the domain but the 'Add Directory' button is grayed out. We have tried ...
0
votes
2answers
30 views

ObjectPendingTakeover error when deleting a custom domain name from Azure Active Directory

I want to delete my custom domain name from Azure. The domain name is not the primary, I sign in with a user that does not have the domain name as part of the username and Azure writes that "all ...
1
vote
3answers
58 views

Catch-22 when trying to delete a custom domain name from Azure

I am trying to delete a custom domain name, example.com, from my Azure directory, but getting an error about not being able to do so, when signed in as user that has 'example.com' in the user name. ...
0
votes
1answer
166 views

Azure Connect “soft match” issues

Before I get into the details: my problem is clearly different than the one described in this question. I'm running a single Azure Connect instance, so the problem clearly isn't due to multiple sync. ...
2
votes
1answer
28 views

What considerations should be made when determining the format of the CN (common name)

We're looking to improve the standardization & quality of data in our active directory. In doing this we've found inconsistencies in the format of the distinguishedName; specifically the format ...
3
votes
1answer
123 views

Azure AD migrating from cloud to on-premises

Has anyone migrated a fully developed Azure AD to on-premises DCs? I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
0
votes
1answer
16 views

Azure AD Conditional Access testing disabled policy

I'm trying to set up Azure AD conditional access. While doing this, I of course want to test the policy I've created. So, I open the what-if tool, put in appropriate information, and click the button. ...
1
vote
1answer
256 views

Azure AD with Office 365 users and a NAS share

I have a customer with Office 365 business premium subscriptions that he got primarily for exchange and office apps. However now that he is expanding, he's increasing the number of computers and ...
1
vote
0answers
231 views

How to set up System Security Services Daemon(SSSD) to authenticate users against Azure Active Directory

I have set Azure Active Directory(AD) up and running along with Azure AD Domain Services in which a single domain with secure LDAP is configured. On a Linux server, I have tested whether it can ...
0
votes
1answer
30 views

AAD Connect and Domain Admin accounts - is it safe to sync them?

I've just installed Active Directory and want to sync the users with already existing Azure AD we have. From technical point of view it looks pretty easy. I've created domain ad.company.com and added ...
1
vote
1answer
71 views

Enabling mailbox access auditing in Office 365 with MFA

Microsoft Security & Compliance center with Microsoft Secure Score has a long list of good, excellent and non-relevant security advises. Sometimes they seem a bit incompatible together... ...
0
votes
1answer
171 views

Field to add employee ID in Azure AD/Office365

Couple of weeks back we moved from GApps to office 365. I noticed that Azure AD does not have field to enter the Employee ID. Can anyone advise is there anyway to get it. We do not use AD Sync and we ...
1
vote
1answer
38 views

Sign In Logs With No Client App

We've been having some issues with our Office 365 services, specifically Exchange online. Some of our users are getting attacked from various countries in attempts to get into their accounts. We're ...
0
votes
1answer
38 views

Leveraging Local AD Groups with Azure AD Connect for Sharepoint in Office 365

We have an on-premise Active Directory that is using Azure Active Directory Connect to synchronize User and Group objects to Azure AD/Office 365. Our organization is interested in beginning to use ...
0
votes
0answers
33 views

Azure AD Connect Enterprise Administrator

We have an Azure AD Connect service synchronizing information from our AD to Azure AD, which is working fine. Now, We want to enable device sync in addition to user's sync. When we configure the ...
0
votes
1answer
51 views

test ad fs using a server name instead of the certificate cn

I've just installed an AD FS 4 server farm and am trying to test connectivity to the proxy servers. In the past (AD FS 2 and 3) I used to use https://fs.domain.name/adfs/fs/federationserverservice....
0
votes
1answer
37 views

Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?

I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
1
vote
1answer
88 views

How to identify a domain controller by scanning a bunch of IP addresses? [closed]

I am looking for a way to determine what Ip addresses are acting as domain controllersin my network of arount 100,000 IP addresses. The main goal is to scan all of the machines and once I identify the ...
0
votes
0answers
447 views

HTTPSConnectionPool(host='management.azure.com', port=443): Max retries exceeded with url

I'm trying to create an principal account from the azure shell (portal.azure.com browser), but seems that can't go through: stan@Azure:~$ az ad sp create-for-rbac --sdk-auth > my.azureauth Role ...
1
vote
1answer
187 views

Azure AD Connect password write-back failing (no errors)

I'm testing Azure AD Connect on a small "test" domain before I proceed with a full sync of our domain. Unfortunately, I'm having some problems. Before I get to the problems, here's my setup: The ...
1
vote
2answers
318 views

How to stop syncing Windows Server with Azure Active Directory

I have a Windows Server 2016 on-premise which is being used to manage devices on a local network. We create and manage users for this local network. One of our guys has accidentally synced our ...
1
vote
1answer
230 views

error 0x801c0002 while joining AAD hybrid

I am setting upa testing lab to simulate AAD hybrid model. When I try to join windows 10 device, I get error 0x801c0002. I can see the device in the azure AD but the status of dsregcmd/join /debug is ...
1
vote
1answer
239 views

Best practice to use AD security group as distribution group in o365

O365 question. We have our on premise Active Directory setup to Sync with O365. In active directory I have a security group named "Quickbooks Users" which gives those users access to the ...
2
votes
1answer
2k views

looks like we can't connect to the URL for your organization's MDM terms of use

This is regarding the Free AzureAD that comes bound to office365 business premium. In previous deployments (these are very small hence no real budget to look at MDM and the extra subscriptions for ...
0
votes
1answer
30 views

Installing ADFS in Azure for Internal-Only access

We have an on-prem Active Directory environment that is only accessed from our corporate network. We want to extend this environment to an Azure subscription via ExpressRoute. We intended to have ...
0
votes
1answer
115 views

O365 Group Based Licensing not Working

I have synced our local Active Directory with Azure AD using Azure Connect. I'm trying to assign Office 365 Licensing to Security Groups on Azure Active Directory, but when I clic on "License" inside ...
0
votes
0answers
152 views

How can I configure the user profile / SAM account name in Azure AD that I got with Office 365 (or Microsoft 365 Business)?

I bought some Office 365 license and learned that I automatically got a free basic Azure AD along with that. So now I joined my first PC to the Azure AD and logged in with an Office 365 user: first....
2
votes
2answers
293 views

Adding dynamic group as member of another dynamic group

In Azure AD, is it impossible for dynamic groups to be added to other dynamic groups? What I'm trying to achieve: dyn-sub-group: It should automatically include all person of department DepSub dyn-...
0
votes
2answers
100 views

Unable to Join local VM to Azure domain

I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
1
vote
1answer
46 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
0
votes
1answer
51 views

In which direction to open AD Connect ports?

Practising setting up SSPR in my Azure lab and struggling with which ports to open on the AD Connect server. I've found the list of firewall ports to open on Microsoft docs but as a beginner I'm not ...
0
votes
1answer
242 views

Windows 10 subscription activation for hybrid Azure AD joined devices

We have On Premises AD synced to Office365 (Azure) and Users having "Microsoft 365 E3" Licences. Dell Desktops with Windows 10 PRO 1803 version joined to On-Premises AD and they are Activated to ...
0
votes
1answer
146 views

MS Azure AD Connect health service high CPU usage

We're experiencing a windows server high CPU usage since some few last updates. The process that is causing it is the MS Azure AD Connect. Does anyone knows what is the root cause and how to get it ...
0
votes
1answer
1k views

SSO between gitlab and azure AD doesnt work

### OmniAuth Settings ###! Docs: https://docs.gitlab.com/ce/integration/omniauth.html gitlab_rails['omniauth_enabled'] = true gitlab_rails['omniauth_allow_single_sign_on'] = ['azure_oauth2'] # ...
1
vote
2answers
329 views

How do you create an Azure Dynamic Device Group, based on the Intune Device Enrollment Manager which enrolled the device via AutoPilot?

I am trying to create a dynamic device group which contains all devices enrolled by X user 'Associated User'? This user is the Device enrollment manager user DEM which allowed me to enroll up to 1K ...