Windows 10: Windows hello pin not working on a Device Joined to Azure AD for a users whose email...

During the set up of a couple of computers for a client we ran into an issue. The process for setting up the computers involves joining the computer to the Azure Active Directory with a local admin account and then logging into each account and setting a windows hello pin for the users as well as the applications they need on a daily basis. A few hours into this process we realized that that one of the users had a misspelling in there Microsoft email address and we changed this in the Azure AD admin portal. Upon returning to the laptop we were able to login with the password but not the pin we

:)

 

Disconnecting on prem AD and then joining Azure AD creates new Windows profile?

Hello everyone,

I have a question about joining computers in my firm from on prem AD to Azure AD. When someone new arrives at our firm (new employee), there is a fresh installation of Windows 10. It is easy to join Azure AD
because it is a fresh start, but now we have to migrate all Windows 10 users that are on prem AD to Azure AD. When I disconnect those users from our local on prem AD and join them to Azure AD, whole new Windows 10 profile is created, without any of settings,
data or anything else on that profile (clean profile with few applications that are installed computer-wide). So my question is, is there any solution to keep their profile settings from before they joined Azure AD? Or I will have to simply tell them to backup
everything (essential data).

What I tried so far:

• Tried tools for migration like ForensiT (User Profile Wizard, User Profile Manager and Transwiz, just to see if it is going to work) - not successful
• Tried changing profile path from registry - not successful
• Tried log in with the old credentials example: CONTOSO\user (because after I joined that computer to Azure AD user should log in as *** Email address is removed for privacy ***) - not successful

Is there anything else I can try? Thanks for your answers.

 

Is there a way to create a sort of dynamic group that removes user's ability to Join devices to Azure AD via Autopilot. The group is going to grant access to users to join devices to Azure AD

Is there a way to create a sort of dynamic group that removes users from a group granted access to add devices to Azure AD. the user's ability to Join devices to Azure AD via Autopilot?

50% of users in our environment are not enrolled in mFA. We do not want to grant access to all users to join devices to Azure AD

 

Azure AD Joined Workstation unable to login

All of our workstations are Azure AD joined when they are first set up. This usually means that any users can log into any device. These accounts are set up w/ Windows 10 Hello, which users are are required to set up a pin.

A couple of these workstations seemed to have flipped, almost looking like they have switched to a local account. There is no option to login as another user, no option to switch between password and pin. And the password for users do not work.

Any ideas?