If you are setting up a new machine and you have Office 365, Azure AD, Intune or CRM why not Azure AD join it and get all the benefits!?
Here is the whole thing in a Sway:
I enjoy computer gaming, zombie movies and mindless action scenes.
Coding without code, Enterprise Mobility Suite, Windows
Azure AD, Azure AD Join
June 22, 2016 at 1:11 pm
Is there a way to do this without associating the device with the administrator account?
It would be nice to be able to pre-provision devices to join Azure AD, but then be assigned to certain users or groups.
June 22, 2016 at 6:32 pm
No, not at this time. The first user that logs on to the device will be administrator.
If you want to pre-provision users you have to use domain join.
Azure AD Join is not meant for BYOD devices where the user is adept enough to be an admin.
If you need to demote users from admin to users it probably means that your users are not ready for BYOD.
June 22, 2016 at 8:44 pm
Thanks for your reply.
Do you know if this functionality is going to change/improve in the near future?
Is the assumption that Azure AD will only be used with BYOD?
Also there is an inconsistency in the user experience, if you are the first user to Azure AD join the device, you have Admin rights, if you are a subsequent user, then you have standard access.
Wouldn’t it make sense to either give all Azure AD users administrator rights, or give all Azure AD users standard access. It seems that the solution that exists is a mix of two different approaches.
June 22, 2016 at 11:12 pm
You are right Azure AD join is targeted for BYOD and capable Information Workers.
Self Service > Automation
It’s expected that the user does things for himself.
You can add additional “support/service” admins to any Azure AD Joined Machine. You do that in the azure console here: http://manage.windowsazure.com
Since its your BYOD device, all other “roaming” users that log on to that machine will be standard users. Hence Azure AD join is not a good alternative for Roaming users on few devices. E.g. a classroom.
If you need other admins you can Inject admins ad-hoc in the management console, link above.
Please log in using one of these methods to post your comment:
You are commenting using your WordPress.com account.
( Log Out /
You are commenting using your Twitter account.
( Log Out /
You are commenting using your Facebook account.
( Log Out /
Connecting to %s
Notify me of new comments via email.
Notify me of new posts via email.
Enter your email address to follow this blog and receive notifications of new posts by email.
Blog at WordPress.com.
You must be logged in to post a comment.