Questions tagged [azure-activedirectory]
The azure-activedirectory tag has no usage guidance.
108
questions
27
votes
2
answers
27k
views
How to give file permissions to AzureAD user on windows 10?
I'm on a Win10 workstation that's joined to AzureAD like this. How can I grant file permissions to an AzureAD user? When I try to use the File Properties > Security > Edit > Add dialog I can't find/...
12
votes
1
answer
5k
views
How do I add an AzureAD user to SQL Server for windows authentication
When users are logging in to a Windows 10 desktop with an Azure Active Directory account how do I add them as a user to SQL Server? Using the Search dialog from the Add Login dialog doesn't seem to ...
12
votes
2
answers
24k
views
What Does the "Use this account everywhere on your device" Dialog Do?
The following dialog is displayed after entering credentials in Outlook for an Office 365 subscription with multi-factor authentication enabled:
Use this account everywhere on your device
...
8
votes
4
answers
8k
views
Windows 10 NTFS permissions for Azure AD account
I joined Windows 10 to Azure Active Directory and signed in with my Azure AD email address and password.
whoami returns AzureAD\<Full Name> and the NTFS permissions of the user profile folder ...
7
votes
2
answers
1k
views
Securing access to a VM-based web server with Azure Active Directory
I am trying to put a bespoke web-based service into Azure. It runs on three Linux VMs, one of which needs to be outward facing (on port 443), the others on a separate subnet and only accessible to the ...
6
votes
1
answer
46k
views
Get-AzureADUser reference of all available fields
For the Azure AD cmdlet, Get-AzureADUser, can someone point me to a reference of all possible fields?
The scenario...
I wanted to export users, including their manager. Here is the only way I found ...
4
votes
0
answers
399
views
How can I connect a Linux box to an Azure AD-Authenticated VPN?
I've been tearing my hair out over this - a client is using an Azure VPN setup that seems to only play nicely specifically with the Azure VPN Client app. It works perfectly on that software, but I ...
3
votes
1
answer
3k
views
Unable to set Azure Active Directory Admin as user greyed out?
I have a SQL Server which I want to enable Azure AD authentication with. On the overview of the server, it shows Active Directory Admin as Not Configured. If I click on that, I am taken to this page:
...
3
votes
1
answer
851
views
Unable to add myself to any ACL while using Azure AD
When I received a new laptop at the beginning of the week, the initial setup walked me through gaining access to my workplace's domain using my work email address, which is also associated with my ...
3
votes
1
answer
60k
views
Disable ADAL via Registry per computer
As part of a project I am part of, we have need to disable Azure Active Directory Authentication Libraries (ADAL) within Office for all users to allow cross domain access to legacy SharePoint sites.
...
3
votes
1
answer
708
views
What is best way to use LDAP-based services with Azure AD?
How can I connect Plastic SCM, which uses non-secure LDAP, to our Azure AD services for authentication?
Thanks!
2
votes
2
answers
2k
views
sqlcmd AAD token authentication fails with cannot discover user realm
I am trying to authenticate to Azure SQL database using AAD user account. According to the documentation I should use -G to enable AAD authentication and then pass the token via -P. So I try it with ...
2
votes
1
answer
622
views
How to use Azure AD SSO SAML for Jira, when Jira is also already setup to use local AD
This tutorial is great and easy to get setup with Azure AD integrated for Jira: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-jiramicrosoft-tutorial
The only problem ...
2
votes
1
answer
64
views
Azure AD Integrated auth on a standalone machine
I'm well aware that Azure AD integrated auth only works on domain joined machines with AD sync enabled. I (as a developer) would like to use it on a standalone Windows 10 Pro box for its handiness.
...
2
votes
1
answer
626
views
Azure AD user's group membership
I'm trying to figure out if a user who logs into Azure AD has the following group:
NT AUTHORITY\Cloud Account Authentication
I don't have Azure AD, so I can't check.
So, could someone who has a ...
2
votes
2
answers
2k
views
ADSync PowerShell commands failing to authenticate
Environment: Running Windows Server that has the latest version of AzureADConnect (2.1.20.0) installed, all seems to be working just fine though.
However when using any of the ADSync Powershell ...
2
votes
0
answers
114
views
Azure error - wrong user password
I've been trying to set up Azure domain services and a linux VM to work together, and currently I'm following the last step(joining the linux VM to the managed domain). I try to initialize Kerberos, ...
2
votes
1
answer
3k
views
How do I grant access to an Azure AD user?
I've joined my laptop to my Azure AD domain. When I type 'whois', I get 'AzureAd\azureuser'. I now have a file that I want to access. I go to the file permissions screen:
It will not recognize my ...
1
vote
4
answers
19k
views
Determine Azure AD Device Id
If you join a new PC to Azure AD during the initial Windows 10 configuration, the device is listed under it's original name, e.g. DESKTOP-NNNNN. If the computer is then renamed (as is common practise),...
1
vote
3
answers
420
views
Determine to which PSSession a command belongs to?
Good evening
Some PowerShell Commands are available online and on-premise, for example, Get-MailContact
Is there a way to recognize if the local Server or e.g. Exchange online is answering the call of ...
1
vote
3
answers
11k
views
O365 - Multifactor Auth - Access Authentication Phone via Powershell
Is is possible to get/set Authentication Phone via Powershell? I found some old documentation that says this is possible via the old MSOnline module but I cannot find anything in the new AzureAD ...
1
vote
1
answer
777
views
Azure required packages installation using "yum"
I've been trying to set up azure domain services and a virtual machine to work together, I'm close to the end of the process but I got stuck in a rut. According to the documentation, I should execute ...
1
vote
1
answer
984
views
Azure AD disappeared from Azure management portal
I have an Office 365 account and an Azure subscription. I created an Office 365 AD and connected it to my Azure account.
The directory was listed before and I used it as an auth mechanism for one of ...
1
vote
3
answers
304
views
Get Edge Version for Azure AD users
I am trying to get the version of Microsoft Edge installed on all Azure AD user computers in my domain. So far, I have the following script, which I think should work, but it keeps returning ...
1
vote
2
answers
5k
views
Persist user selection on login screen after reboot on Windows 11
I use an Azure AD instance for my home desktop logins. To deter my wife from nuking my carefully curated Firefox tabs again, I created an account for her and set it up with Windows Hello and a nice ...
1
vote
2
answers
13k
views
Change Azure AD registered devices to Joined
I have a number of Windows 10 devices that have an Azure AD join type as registered. I would like to change the join type to joined. What is the process to achieve this?
1
vote
1
answer
12k
views
Can't join Azure Active Directory
I currently have an issue with Windows 10 Pro and getting it connected to Azure Active Directory.
Microsoft says you need to go to Settings→Accounts→Your Info→Access Work Or School ...
1
vote
1
answer
8k
views
accessing an azure AD via its LDAP url
We wish to use azure AD for authentication for our application which is also hosted on azure.
How to determine the LDAP url to connect to? When we create a new Azure AD, there is no location on the ...
1
vote
0
answers
224
views
AzureAD/User is not able for logon in services
I am trying to run a service with AzureAD/User, but it is not letting me to add that user in below and run the service.
Service-Logon-configuration:
But it is showing me below error when I run ...
1
vote
0
answers
267
views
Can't log into PC after removing it from Azure AD
I had some trouble with registrations for a computer (timeout when trying to add Windows Hello) so I removed devices from my AAD account.
Unfortunately, I managed to remove a device that should have ...
1
vote
0
answers
129
views
Password created with New-AzureADServicePrincipalPasswordCredential not visible in AD Portal?
There is a Powershell command New-AzureADServicePrincipalPasswordCredential in the AzureAD module which adds a password credential to an Active Directory Service Principal (and an analogous command ...
1
vote
0
answers
609
views
Determining if client is Azure AD joined using dsregcmd fails if called from a script
We need to test if customer PCs/Laptops meet certain criteria, and one of them is they must have a device that's domain joined - no home users, no serverless non-domain scenarios.
With Azure, the way ...
1
vote
1
answer
24
views
How exactly are criteria of conditional access for client state (domain-joined) evaluated
When evaluating conditional access policies within AAD, Microsoft offers to check the device-state. This includes also checks for "Azure AD joined" and "Hybrid joined".
If a client ...
1
vote
0
answers
50
views
Find out if using Azure Active Directory?
We are looking for an easy way to find out if someone is using Azure Active Directory or Standard Active Directory.
If I spoke to a standard user with no admin privileges, is there a way they would be ...
1
vote
0
answers
520
views
How do I know if the pc I'm using is an Azure VM or a regular desktop Windows installation?
What are some ways of diagnosing whether I'm on an Azure VM as opposed to a local Windows 10 installation? I get windows event logs that reference AAD and others that seem to indicate that I'm ...
1
vote
1
answer
392
views
Schedule Microsoft Teams Meeting in connection with Exchange on-premise and Outlook Teams Add-In
I'm trying to find out if I can utilize the Outlook Teams Add-In to schedule Teams Meetings via Outlook when ONLY Exchange on-prem (no hybrid) is installed and AD accounts are synched to Azure AD.
...
1
vote
1
answer
6k
views
Azure AD Sync Error - Existing Admin Role Conflict
I have an issue with our Azure AD tenant syncing with my domain AD account. When we set up the tenant (along with Office 365), we used a generic ID in the format [email protected]. My ...
1
vote
0
answers
636
views
Azure guest account unable to log in
We are using O365 and SharePoint online, and have many guest accounts, both with personal accounts and users on another O365 tenant. I have one particular user on an O365 tenant that when he accepts ...
1
vote
1
answer
3k
views
How to change user home folder in Azure Active Directory?
Is there a way to change default user home folder naming in Azure Active Directory? I am thinking about switching to Microsoft 365 E3 or E5 and join my computers into domain but when I did trial, ...
1
vote
0
answers
66
views
Strange shared folder issue
Same laptop. When I log in, a shared folder on our network is accessible. But when another user logs in, the same shared folder is not accessible. The shared folder is public. The laptop has Windows ...
1
vote
0
answers
75
views
How do I connect Word to a different OneDrive for Business account?
Background
Our company is in the process of migrating AD domains and O365 tenants. This is a phased migration with many moving parts. We're now using our new accounts to access the O365 services, ...
1
vote
0
answers
401
views
can we automatically update client secret in azure active directory application?
There is an application (inside Azure active directory--> app registration) in my project. The client secret in in that application in “certification and secrets” has got expired now. Now I want to ...
1
vote
1
answer
1k
views
How can I configure MS Edge browser in a corporate domain account to sync "Favorites" with a non-domain MS-linked consumer account?
How can I run the Microsoft Edge web browser from within a Windows 10 account on a PC belonging to a corporate domain in such a manner that Edge in the corporate account syncs its "Favorites," "...
1
vote
0
answers
1k
views
Can a guest or external AD user RDP into a VM in Azure ADDS?
I have an Azure Active Directory (contosodev.net) with Azure Active Directory Domain Services. This directory is a separate directory from our main one (contoso.net). I can add external users as ...
1
vote
2
answers
2k
views
AzureAD profile recreation causes a black overlay on Windows 10
Ok, long one guys.
Fault: The initial fault that we found was that when we go to reset an AzureAD created profile on the laptop. Removing the AD link goes fine, the local user account has been fine ...
1
vote
1
answer
448
views
Unable to reset password for calendar account in Office365
I am attempting to log-on to one of our conference room accounts in Office365 via the web portal and sometimes I get the message "Account Locked." I've attempted using the Outlook 2016 app as well and ...
1
vote
1
answer
4k
views
Azure Group added to Local Machine Administrators Group
What I am aiming to do is add an Azure Group "Local_Admins" SID:b42afbaf-7e4d-4d1b-b2c1-39630ccec6b2 to the local Administrator group on devices.
I know there is a solution for adding users to the ...
1
vote
2
answers
8k
views
How to Generate QR Code for Microsoft Authenticator Work or School Recovery
I've created a Microsoft Authenticator backup for several Microsoft 365/Azure Work or School accounts, but when recovering to a new device these need additional verification in the form of a QR code. ...
0
votes
1
answer
94
views
"Organisation requires pin change" even after disconnecting organisation
I have been using the same PIN code for Windows 11 for a long time. Recently I connected my machine to a work-account. I tried to log in with my PIN code, but I got a message that I had to change my ...
0
votes
3
answers
3k
views
Azure Active Directory Users Cannot Log in via Windows Remote Desktop, How to Fix?
I'm working on setting up a Windows 10 Pro machine so that its user can log in using RDP.
The user is logging in with their AAD credential, [email protected]. When using this credential, RDP asks for ...