Windows 10: PC on Domain prompted to Join workplace

Hi All,


All PC's in my organization are connected to a Domain. Last week, one of my user was prompted with the following screen

" Windows saves your account and makes it easier to sign up for apps and websites. So you do not have to enter your password every time you access the resources of your organization. You may need to allow your organization to manage certain settings on your device ".

This is a company provided PC.This user does not have any Admin rights on the pc and is logged in as a standard user.

There were no Office / standard Software updates that were installed on the PC as well.


I am trying to see when a user will be presented with the above mentioned pop up and to see cause any changes to the way pc is being connected.

:)

 

Join Windows 10 PC to a Domain  

That would explain it.

Active Directory is the way, the tool local domains use for user control and management. There are three different methods a user / device can join AD: joining local domain and signing in with domain credentials, joining through Azure AD and signing in with Azure AD credentials, and the "lowest level" so called workplace join, connect a local or Microsoft sign-in account to an Azure AD (workplace) account.

Joining a local domain and Azure AD basically is the same. Of course there are administrative differences from IT departement's point of view, but for the most the only difference end user sees is the sign-in credentials.

Once you have joined a local domain, you cannot join Azure AD, and vice versa. It's one or the other.

Joining Azure AD instead of joining a domain is in my opinion the future, Microsoft's clear goal being to get corporate users to move from local domains and on-premises domain controllers to Azure AD. I posted an opinion piece about that just a few days ago on my site: Secure Windows on a Secure Device Win10.Guru

Azure AD gives you two levels to join: Workplace join simply adds your Azure AD account to Windows 10 for single-sign-on to all your workplace services, but you will continue signing in to Windows with your current local or Microsoft account:




This will be shown as a connected account:




As you will continue signing in with your local or Microsoft account, you are still pretty much in control. You can use workplace services, company store and such but IT admin cannot set up any restrictions on your device. A workplace joined user / device can still join a local domain.

If you select Join Azure AD instead, your sign-in account will be changed to Azure AD account. This is shown as Azure AD joined:




Once joined to Azure AD, joining a local domain is no longer possible.

I'm not sure if the above explains this clear enough. The point is, a local domain and Azure AD effectively chooses the way you are joined to your workplace. Only one of these methods to join can be used.

 

Join Windows 10 PC to a Domain  


@rseiler,

I just finished clean installing Windows 10 Enterprise build 17093 in a VM using a local account, and it still has the same steps in the tutorial for me.

Is your PC already joined to a domain?

 

Join Windows 10 PC to a Domain  


I just checked an RS3 PC already domain-joined (the RS3 I was checking earlier was not yet joined to anything), and there are no blue links for it either, strongly suggesting that MS lets you only do one or the other.

What I should try is doing an Azure AD join (any method) and then doing a domain join via the old UI. That may be a loophole.