Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This service helps your employees access external resources, such as Microsoft 365, the Azure portal, and thousands of other SaaS applications. Azure Active Directory also helps them access internal resources like apps on your corporate intranet network, along with any cloud apps developed for your own organization.
This article will guide you how to join employee clients to Azure AD.
Step 1: Create a users
Ex: You created Azure AD with name: VACIF409.onmicrosoft.com
You Login to https://portal.azure.com/. Select Azure Active Directory > User > New User > Create New User.
Fill in information such as Username, Name of the user to create.
Password: click “Let me create the password“. Enter the password and click Create.
Below are the created users.
Step 2: Enable join device to Azure AD.
Go to Home > Manage > Device > Device Settings.
Select “All” under “Users want to join devices to Azure AD”. This Allows all Azure AD users to join their devices to Azure Active Directory. Click Save.
Step 3: Join the client to Azure AD
On the client machine (Ex: VM10) you execute the power shell command to check the following: dsregcmd /status
In Device State: AzureAdJoined: NO means the client has not joined Azure AD.
Next, go to Settings > Account > Access work or school > Click Connect.
Click choose Join this device to Azure Active Directory.
Enter the username created in step 1. Click Next. Enter password. Click Sign in.
Step 4: Check the result
Open Power Shell again and re-enter the command above to check.
In Device State: AzureAdJoined: Yes means that the client has been successfully joined Azure AD.
Returning to Access work or school will appear user u1 “Connected to …Azure AD“.
Check on portal.azure.com. Go to Device > All Devices. You will see that the machine named VM10 has been joined.