{"id":2408,"date":"2020-11-30T21:22:20","date_gmt":"2020-11-30T21:22:20","guid":{"rendered":"https:\/\/hypervlab.co.uk\/?p=2408"},"modified":"2020-11-30T21:31:21","modified_gmt":"2020-11-30T21:31:21","slug":"autopilot-configuring-azuread-hybrid-deployment","status":"publish","type":"post","link":"https:\/\/hypervlab.co.uk\/?p=2408","title":{"rendered":"AutoPilot – Configuring AzureAD Hybrid Deployment"},"content":{"rendered":"Reading Time: <\/span> 4<\/span> minutes<\/span><\/span>\n

In this blog post, we will cover the steps required to set up. AzureAD Hybrid Sync, in preparation for moving away from our On-Premise Active Directory Server.
Note<\/strong>: This post takes into account that you already have the AzureAD Sync Tool<\/a>.<\/p>\n\n\n\n

Open the Azure Active Directory Connect App – Select “Configure”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Select “Configure Device Options”<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

For Hybrid AzureAD Join to work, Your AD Schema needs to be 2012R2 or Higher. For more information, you can check out the Microsoft support documentation [Here<\/a>]<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In Connect to Azure AD<\/strong>, enter the credentials of a global administrator for your Azure AD tenant.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In Device options<\/strong>, select Configure Hybrid Azure AD join<\/strong>, and then select Next<\/strong>.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In Device Operating Systems<\/strong>, select the Windows 10 or later domain-joined devices<\/strong>.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

In SCP configuration<\/strong>, for each forest where you want Azure AD Connect to configure the SCP, complete the following steps, and then select Next<\/strong>.<\/p>\n\n\n\n

  1. Select the Forest<\/strong>.<\/li>
  2. Select an Authentication Service<\/strong>.<\/li>
  3. Select Add<\/strong> to enter the enterprise administrator credentials.<\/li><\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    In Ready to configure<\/strong>, select Configure<\/strong>.<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Hybrid Domain Join Configuration Completed!<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Troubleshooting Hyrbid Join Errors<\/h3>\n\n\n\n

    While testing the steps for the blog post I ran into an error as shown below;
    For further diagnostics and support check out the docs.microsoft info: [Here<\/a>]<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    From a look at the event viewer log files it shows.<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    On further investigation, the error message relates to the fact the computer is not found the AzureAD Portal. This means that we’ve missed the OU from the AzureAD Directory Sync.<\/p>\n\n\n\n

    \"\"<\/figure><\/div>\n\n\n\n

    Once the Computer OU has been selected, we can completed an initial sync to AzureAD.<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    If the sync has been successful you should see a list of computer objects which have been added.<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Checking Hybrid Join Status.<\/h3>\n\n\n\n

    From the AzureAD Portal, Under Devices you should see the devices check-in in a “pending” state<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    From the local machine you can use the command “dsregcmd \/status” and get the following result<\/p>\n\n\n\n

    \n+----------------------------------------------------------------------+\n| Device State                                                         |\n+----------------------------------------------------------------------+\n\n             AzureAdJoined : YES\n          EnterpriseJoined : NO\n              DomainJoined : YES\n                DomainName : hypervlab\n\n+----------------------------------------------------------------------+\n| Device Details                                                       |\n+----------------------------------------------------------------------+\n\n                  DeviceId : 3c849a08-096e-467c-8eab-b8a3b8f200c0\n                Thumbprint : 61BBC28FB669FEC1E977FB60ACCCE69DBBAFB0E5\n DeviceCertificateValidity : [ 2020-11-30 20:42:30.000 UTC -- 2030-11-30 21:12:30.000 UTC ]\n            KeyContainerId : 46a23cd7-ac22-4b70-82be-beb6eb0f2a14\n               KeyProvider : Microsoft Software Key Storage Provider\n              TpmProtected : NO\n\n+----------------------------------------------------------------------+\n| Tenant Details                                                       |\n+----------------------------------------------------------------------+\n\n                TenantName : \n                  TenantId : \n                       Idp : login.windows.net\n               AuthCodeUrl : https:\/\/login.microsoftonline.com\/903c83ca-4b31-4b80-baf4-2adcdbed419f\/oauth2\/authorize\n            AccessTokenUrl : https:\/\/login.microsoftonline.com\/903c83ca-4b31-4b80-baf4-2adcdbed419f\/oauth2\/token\n                    MdmUrl : \n                 MdmTouUrl : \n          MdmComplianceUrl : \n               SettingsUrl : \n            JoinSrvVersion : 1.0\n                JoinSrvUrl : https:\/\/enterpriseregistration.windows.net\/EnrollmentServer\/device\/\n                 JoinSrvId : urn:ms-drs:enterpriseregistration.windows.net\n             KeySrvVersion : 1.0\n                 KeySrvUrl : https:\/\/enterpriseregistration.windows.net\/EnrollmentServer\/key\/\n                  KeySrvId : urn:ms-drs:enterpriseregistration.windows.net\n        WebAuthNSrvVersion : 1.0\n            WebAuthNSrvUrl : https:\/\/enterpriseregistration.windows.net\/webauthn\/903c83ca-4b31-4b80-baf4-2adcdbed419f\/\n             WebAuthNSrvId : urn:ms-drs:enterpriseregistration.windows.net\n    DeviceManagementSrvVer : 1.0\n    DeviceManagementSrvUrl : https:\/\/enterpriseregistration.windows.net\/manage\/903c83ca-4b31-4b80-baf4-2adcdbed419f\/\n     DeviceManagementSrvId : urn:ms-drs:enterpriseregistration.windows.net\n\n+----------------------------------------------------------------------+\n| User State                                                           |\n+----------------------------------------------------------------------+\n\n                    NgcSet : NO\n           WorkplaceJoined : NO\n             WamDefaultSet : NO\n\n+----------------------------------------------------------------------+\n| SSO State                                                            |\n+----------------------------------------------------------------------+\n\n                AzureAdPrt : NO\n       AzureAdPrtAuthority : \n             EnterprisePrt : NO\n    EnterprisePrtAuthority : \n\n+----------------------------------------------------------------------+\n| Diagnostic Data                                                      |\n+----------------------------------------------------------------------+\n\n        AadRecoveryEnabled : NO\n               KeySignTest : PASSED\n\n+----------------------------------------------------------------------+\n| Ngc Prerequisite Check                                               |\n+----------------------------------------------------------------------+\n\n            IsDeviceJoined : YES\n             IsUserAzureAD : NO\n             PolicyEnabled : NO\n          PostLogonEnabled : YES\n            DeviceEligible : NO\n        SessionIsNotRemote : NO\n            CertEnrollment : none\n              PreReqResult : WillNotProvision\n\n<\/code><\/pre>\n\n\n\n
    Finally going back to the AzureAD Device Portal we can see that the device has completed the check-in<\/p>\n\n\n\n
    \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"
    Reading Time: <\/span>  4<\/span> minutes<\/span><\/span>In this blog post, we will cover the steps required to set up. AzureAD Hybrid Sync, in preparation for moving away from our On-Premise Active Directory Server. Note: This post takes into account that you already have the AzureAD Sync Tool. Open the Azure Active Directory Connect App – Select “Configure” Select “Configure Device Options” […]<\/p>\n","protected":false},"author":2,"featured_media":2425,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84],"tags":[285,93,282,95,106,132],"class_list":["post-2408","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-m365","tag-autopilot","tag-azuread","tag-cloud","tag-hybridsync","tag-windows","tag-windows10"],"yoast_head":"\nAutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hypervlab.co.uk\/?p=2408\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB\" \/>\n<meta property=\"og:description\" content=\"Reading Time:  4 minutesIn this blog post, we will cover the steps required to set up. AzureAD Hybrid Sync, in preparation for moving away from our On-Premise Active Directory Server. Note: This post takes into account that you already have the AzureAD Sync Tool. Open the Azure Active Directory Connect App – Select “Configure” Select “Configure Device Options” […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hypervlab.co.uk\/?p=2408\" \/>\n<meta property=\"og:site_name\" content=\"HypervLAB\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-30T21:22:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-11-30T21:31:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Simon Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/smoon_lee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408\",\"url\":\"https:\/\/hypervlab.co.uk\/?p=2408\",\"name\":\"AutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB\",\"isPartOf\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage\"},\"thumbnailUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png\",\"datePublished\":\"2020-11-30T21:22:20+00:00\",\"dateModified\":\"2020-11-30T21:31:21+00:00\",\"author\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\"},\"breadcrumb\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hypervlab.co.uk\/?p=2408\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage\",\"url\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png\",\"contentUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2408#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hypervlab.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AutoPilot – Configuring AzureAD Hybrid Deployment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hypervlab.co.uk\/#website\",\"url\":\"https:\/\/hypervlab.co.uk\/\",\"name\":\"HypervLAB\",\"description\":\"Blogging about all thing Microsoft\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hypervlab.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\",\"name\":\"Simon Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"caption\":\"Simon Lee\"},\"description\":\"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \\\"hypervlab\\\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.\",\"sameAs\":[\"https:\/\/hypervlab.co.uk\",\"https:\/\/www.linkedin.com\/in\/simon-john-lee\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee\"],\"url\":\"https:\/\/hypervlab.co.uk\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hypervlab.co.uk\/?p=2408","og_locale":"en_GB","og_type":"article","og_title":"AutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB","og_description":"Reading Time:  4 minutesIn this blog post, we will cover the steps required to set up. AzureAD Hybrid Sync, in preparation for moving away from our On-Premise Active Directory Server. Note: This post takes into account that you already have the AzureAD Sync Tool. Open the Azure Active Directory Connect App – Select “Configure” Select “Configure Device Options” […]","og_url":"https:\/\/hypervlab.co.uk\/?p=2408","og_site_name":"HypervLAB","article_published_time":"2020-11-30T21:22:20+00:00","article_modified_time":"2020-11-30T21:31:21+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png","type":"image\/png"}],"author":"Simon Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/smoon_lee","twitter_misc":{"Written by":"Simon Lee","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hypervlab.co.uk\/?p=2408","url":"https:\/\/hypervlab.co.uk\/?p=2408","name":"AutoPilot - Configuring AzureAD Hybrid Deployment - HypervLAB","isPartOf":{"@id":"https:\/\/hypervlab.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage"},"image":{"@id":"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage"},"thumbnailUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png","datePublished":"2020-11-30T21:22:20+00:00","dateModified":"2020-11-30T21:31:21+00:00","author":{"@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359"},"breadcrumb":{"@id":"https:\/\/hypervlab.co.uk\/?p=2408#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hypervlab.co.uk\/?p=2408"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/?p=2408#primaryimage","url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png","contentUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/11\/FeatureImage_AutoPilot_Hybrid.png","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/hypervlab.co.uk\/?p=2408#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hypervlab.co.uk\/"},{"@type":"ListItem","position":2,"name":"AutoPilot – Configuring AzureAD Hybrid Deployment"}]},{"@type":"WebSite","@id":"https:\/\/hypervlab.co.uk\/#website","url":"https:\/\/hypervlab.co.uk\/","name":"HypervLAB","description":"Blogging about all thing Microsoft","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hypervlab.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359","name":"Simon Lee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","caption":"Simon Lee"},"description":"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \"hypervlab\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.","sameAs":["https:\/\/hypervlab.co.uk","https:\/\/www.linkedin.com\/in\/simon-john-lee\/","https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee"],"url":"https:\/\/hypervlab.co.uk\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2408"}],"version-history":[{"count":0,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2408\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/media\/2425"}],"wp:attachment":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}