Windows 10: Dis-Join Azure AD

Hello - Setting up a new install of Windows 10, when I attempt to join our domain active directory I get the message Joined to Azure AD, choose disconnect your device first. Researched how and the option to disconnect is not there. One person who also reported this same issue just re-imaged the system. Thanks - Rich



:)

 

Disconnecting on prem AD and then joining Azure AD creates new Windows profile?

Hello everyone,

I have a question about joining computers in my firm from on prem AD to Azure AD. When someone new arrives at our firm (new employee), there is a fresh installation of Windows 10. It is easy to join Azure AD
because it is a fresh start, but now we have to migrate all Windows 10 users that are on prem AD to Azure AD. When I disconnect those users from our local on prem AD and join them to Azure AD, whole new Windows 10 profile is created, without any of settings,
data or anything else on that profile (clean profile with few applications that are installed computer-wide). So my question is, is there any solution to keep their profile settings from before they joined Azure AD? Or I will have to simply tell them to backup
everything (essential data).

What I tried so far:

• Tried tools for migration like ForensiT (User Profile Wizard, User Profile Manager and Transwiz, just to see if it is going to work) - not successful
• Tried changing profile path from registry - not successful
• Tried log in with the old credentials example: CONTOSO\user (because after I joined that computer to Azure AD user should log in as *** Email address is removed for privacy ***) - not successful

Is there anything else I can try? Thanks for your answers.

 

Joining a Windows 10 Pro machine to Azure AD without linking/registering an employees email address to that computer

I have been researching for a few weeks now trying to figure out how to join Azure AD for new purchased machines when setting up the machine.

I have two different scenarios that would be joining azure AD.

1. Shipping a machine that has not been setup yet directly to an employee's location. I have to walk through step by step on how to configure settings, join the azure domain, and how to download a program or two. Is their a Microsoft process that I can put
information into that knows that computer needs to join our azure domain? I do not wish to sign in with my credentials to join the azure domain each time we order a new computer.

2. If my company has a windows 10 Home edition machine that we would want to add to our Azure AD, We purchase a windows 10 pro license and activate it under the settings. our next step is going into the settings to join an azure AD domain through a Microsoft
account, however I do not wish to register my account on every computer in our environment. Is their a way to have this computer join azure AD with some sort of a token or activation process? The second issue to this scenario is after joining the azure AD
with my credentials the local admin account is still active and I need to then go through the process of logging in and removing this account.

What would be the best process of joining my environments machines to our Azure AD network without having to register my account with each computer?

 

To join a box to on premise or azure ad?

Right now I am working for a small shop, about 50 folks and like most folks half of them are remote at any give time plus a few permanent remote folks...most of the services that people use are cloud based through other vendors tied back to SAML/ADFS for
SSO...one of the services is 365, which gives us Azure AD and also a foot in the door with EMS, AD Prem, Write management, etc...

as one of the first things I did at this gig was stand up few servers for ADFS (inside and proxy) plus Azure Connect...then I did all the AD building and joining of endpoints. but 365 is not Federated yet

Beginning in windows 10-1511 we can start joining our boxes to the Azure AD...but seems like options are limited, endpoints are managed via intune vice GPOs, not to mention LAPS isnt out there for azure joins let alone bitlocker management

so I guess its a trade off...would love to here some stories and other folks thoughts...I had a hair brain idea of ditch the adfs boxes (since I basically rent them) and get EMS...but having a hard time getting data and testing