Windows 10: Windows Hello for Business with on-Prem AD

Hi, The issue we have right now is that we are setting up Windows Hello for business in my company but it seems to want to force us to use a microsoft account.The company has currently no plans on going with Azure AD.Also not all our users have a microsoft account since it is not useful for them.With some tests we found and issue where we are unable to change the PIN code for windows hello withought adding a microsoft account.As we set the PIN code to expire every year that would be an issue if users are not able to change it.Thanks in advance,Sam

:)

 

Azure AD Banned Password List without On-Prem Agent

Hi All,

I am considering enabling banned password list for our Azure AD in our hybrid environment and want to ask, how doing that will affect our environment if we do not install the on-prem DC agent, as our on-prem does not meet minimum requirements.

Which password resets and changes will be validated through banned password list and which will not?

Will 'noncompliant' passwords synced from on-prem to Azure AD be causing issues?

TIA,

W

 

Disconnecting on prem AD and then joining Azure AD creates new Windows profile?

Hello everyone,

I have a question about joining computers in my firm from on prem AD to Azure AD. When someone new arrives at our firm (new employee), there is a fresh installation of Windows 10. It is easy to join Azure AD
because it is a fresh start, but now we have to migrate all Windows 10 users that are on prem AD to Azure AD. When I disconnect those users from our local on prem AD and join them to Azure AD, whole new Windows 10 profile is created, without any of settings,
data or anything else on that profile (clean profile with few applications that are installed computer-wide). So my question is, is there any solution to keep their profile settings from before they joined Azure AD? Or I will have to simply tell them to backup
everything (essential data).

What I tried so far:

• Tried tools for migration like ForensiT (User Profile Wizard, User Profile Manager and Transwiz, just to see if it is going to work) - not successful
• Tried changing profile path from registry - not successful
• Tried log in with the old credentials example: CONTOSO\user (because after I joined that computer to Azure AD user should log in as *** Email address is removed for privacy ***) - not successful

Is there anything else I can try? Thanks for your answers.

 

Azure AD Hybrid environment with on prem

I have an existing domain in PA but I want to avoid purchasing a lot of equipment to start a domain in MIA. If I were to choose Azure AD instead on purchasing an On-prem and a server license; purchase all the equipment needs for a on-prem setup isn't neccessary, I can create a Hybrid Environment where I have Azure AD for any other location and an on-prem server in one?