Windows 10: Remote desktop to an Azure joined PC on corporate domain

Hello,

I wondered if someone can help.


I am trying to set up a remote worker, who will need to use a home PC to RDP into their work PC which is on a corporate LAN. I have everything set up and I can establish an RDP connection BUT I am unable to log in using "*** Email address is removed for privacy ***" which is what they will need to log on as.


I wanted to ask if this was because the home PC is not on the Azure domain? Also is there a way around this without adding home devices to our AzureAD?


Any help will be much appreciated.


Thank you.

:)

 

Remote desktop azure joined computers

We are testing to move everyone from our old domain to azure ad join computers. But remote desktop don't work properly. It works sometimes from an azure AD join computer to another AAD. Dont work from from AAD to an domain joined.

Any sugestions?

[Post moved by the moderator to the appropriate forum category]

 

Join Windows 10 PC to a Domain  

That would explain it.

Active Directory is the way, the tool local domains use for user control and management. There are three different methods a user / device can join AD: joining local domain and signing in with domain credentials, joining through Azure AD and signing in with Azure AD credentials, and the "lowest level" so called workplace join, connect a local or Microsoft sign-in account to an Azure AD (workplace) account.

Joining a local domain and Azure AD basically is the same. Of course there are administrative differences from IT departement's point of view, but for the most the only difference end user sees is the sign-in credentials.

Once you have joined a local domain, you cannot join Azure AD, and vice versa. It's one or the other.

Joining Azure AD instead of joining a domain is in my opinion the future, Microsoft's clear goal being to get corporate users to move from local domains and on-premises domain controllers to Azure AD. I posted an opinion piece about that just a few days ago on my site: Secure Windows on a Secure Device Win10.Guru

Azure AD gives you two levels to join: Workplace join simply adds your Azure AD account to Windows 10 for single-sign-on to all your workplace services, but you will continue signing in to Windows with your current local or Microsoft account:




This will be shown as a connected account:




As you will continue signing in with your local or Microsoft account, you are still pretty much in control. You can use workplace services, company store and such but IT admin cannot set up any restrictions on your device. A workplace joined user / device can still join a local domain.

If you select Join Azure AD instead, your sign-in account will be changed to Azure AD account. This is shown as Azure AD joined:




Once joined to Azure AD, joining a local domain is no longer possible.

I'm not sure if the above explains this clear enough. The point is, a local domain and Azure AD effectively chooses the way you are joined to your workplace. Only one of these methods to join can be used.

 

Join Windows 10 PC to a Domain  


I just checked an RS3 PC already domain-joined (the RS3 I was checking earlier was not yet joined to anything), and there are no blue links for it either, strongly suggesting that MS lets you only do one or the other.

What I should try is doing an Azure AD join (any method) and then doing a domain join via the old UI. That may be a loophole.