Windows 10: Log on times don't match between Active Directory, Azure & Exchange

Brandon Peavy · Nov 18, 2019

When I run Active Directory reports for Audits, I am showing a bunch of users that have not logged on in over 45 days which requires them to be disabled. When I check these same users against Azure and Exchange reports,they have logged into these services within the 45 days which means that they are still active. How can I get these logins to sync between AD/Azure/Exchange without having to run three different reports and compare them?

:)

Brink · Nov 18, 2019

Windows 10 and Azure Active Directory: Embracing the Cloud

When we talked about new Windows 10 manageability choices back in November, we announced new capabilities that will enable Windows 10 to leverage Azure Active Directory. Since these capabilities are now starting to appear in the Windows 10 preview builds, this is a great time to explore them in more detail.

When talking about Windows 10 and Azure Active Directory, it’s important to understand that there are a few different scenarios that organizations may use:

Users will be able to join their work Windows 10 devices directly to Azure Active Directory and sign into Windows using their Azure Active Directory account and password – while still having single sign-on access to Office 365 and to on-premises services that leverage Active Directory authentication. The devices can be automatically enrolled into a mobile device management (MDM) service at the same time.

Users will be able to add their work account to their personal (BYOD) Windows 10 devices, establishing a link between Windows and their work account managed in Azure Active Directory, which will provide single sign-on access to the organization’s services. The devices may also be automatically enrolled in mobile device management (MDM).

Traditional PC devices, joined to an existing Active Directory domain, will have single sign-on access to cloud-based services like Office 365, the Windows Store, or any other Azure Active Directory-aware application. Windows 10 understands that the Active Directory account is associated with a synchronized Azure Active Directory account. (Device management continues to be provided using Active Directory Group Policy and System Center Configuration Manager.)

These scenarios provide organizations a great deal of flexibility – choose the scenario that makes the most sense for each device.

Since most organizations already use Active Directory, the logical next step for exploring Windows 10’s Azure Active Directory support is to set up directory integration between Active Directory and Azure Active Directory. For those that prefer more hands-on learning, check out the on-demand content from Microsoft Ignite.

But we don’t want to stop there, we have much more information to share. Alex Simons, Director of Program Management for the Identity and Services Division, and his team will be posting a series of blogs talking about Windows 10 and Azure Active directory, starting with this initial blog post.
Click to expand...

Source: http://blogs.windows.com/business/20...ing-the-cloud/

RodrigoIzquierdo · Nov 18, 2019

Keyboard charachters don´t match

How to correct keyboard charachters if language region does match correct keyboard but charachters still don´t.

SarahKong · Nov 18, 2019

Bitlocker and Azure Active Directory

Hi Rob-Nicholson-Malt

My name is Sarah Kong and I am an independent adviser that is here to try and help you with your issue.

On-premise domain accounts and Azure AD accounts are 2 separate accounts that you can login with.

You can join your PC to both Onprem AD and Azure AD.

What makes the difference is which one you login in with.

For my example let's say my work\onprem account is *** Email address is removed for privacy *** and my Azure AD account is *** Email address is removed for privacy ***.

If i login with the *** Email address is removed for privacy *** then i am authenticating to my onprem servers.

If I login with the *** Email address is removed for privacy *** then i am authenticating to Azure AD.

So as for your questions when you enable bitlocker which account are you logged in with? onprem or azure AD?

And if onprem i hope you have a GPO on your DCs that says recovery key stored in Active Directory. If that is the case then you don't have to worry about saving it to the cloud and yes IT staff would retrieve the key from the computer object for the user.

If they are logging in with their Azure AD account and enabling bitlocker then same thing IT will get it from the Devices in Azure AD.

Windows 10: Log on times don't match between Active Directory, Azure & Exchange

Log on times don't match between Active Directory, Azure & Exchange

Log on times don't match between Active Directory, Azure & Exchange

Log on times don't match between Active Directory, Azure & Exchange

Log on times don't match between Active Directory, Azure & Exchange - Similar Threads - Log times don't

Bitlocker Key Not Appearing in On-Prem Active Directory and Azure Active Directory

Bitlocker Key Not Appearing in On-Prem Active Directory and Azure Active Directory

Bitlocker Key Not Appearing in On-Prem Active Directory and Azure Active Directory

Active Directory and Exchange Server Upgrade Issues

Active Directory and Exchange Server Upgrade Issues

Having a Active Directory PDC on Azure Hosting?

Having a Active Directory PDC on Azure Hosting?

Azure Active Directory

Bitlocker and Azure Active Directory