Difference between Azure AD registered vs Azure AD Joined vs Hybrid Azure AD joined

Ғылым және технология

Difference between Azure AD registered vs Azure AD joined vs Hybrid Azure AD joined devices
Azure AD Registered:
It is mainly used for personal devices.
To allow cloud based applications to be accessed through your personal devices such as Laptop, Mobile phones, tabs etc. Users still using personal ID’s.
Device is just registered. Organization is not controlling your device (until unless you are not explicitly allowing personal devices to enroll)
It provides SSO access for O365 and other apps without asking you to enter password every time.
Your personal data is secured, organizations won’t be able to see your personal files, can’t wipe / delete it.
They still have control on work profile.
Azure AD Joined:
It is used for corporate devices
To sign into Azure AD account.
Users are logging on with Azure AD credentials only.
More control as compared to Azure AD registered devices.
Hybrid Azure AD joined:
Hybrid Azure AD= Domain Join + Azure AD Join
Organizations who are not fully ready for getting rid of on-premises infrastructure.
Azure AD Connect is required
Azure AD Connect is required to sync the objects such as users,groups,devices
You have benefit of having on-premises infra (Group policies, SCCM, WSUS etc) and joining to Azure AD.
HAAD joined devices require line of sight to on-premises domain controllers periodically.
Follow me on:
Blog Website: manishbangia.com/blog
Linkedin: / manishbangia
Twitter: / manish_bangia
Facebook group: / 183183326326502

Пікірлер: 64

  • @prashantpatale7694
    @prashantpatale7694 Жыл бұрын

    Very nicely explained

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you

  • @Learn_with_Manohar
    @Learn_with_Manohar10 ай бұрын

    Great example, thank you for the session..

  • @bradpeters9511
    @bradpeters951113 күн бұрын

    Very clear explanations and examples. Thank you very much.

  • @ManishBangia

    @ManishBangia

    13 күн бұрын

    Glad it was helpful!

  • @adi_0001
    @adi_0001 Жыл бұрын

    Your way of explanation is really easy to understand. Liked it very much👍.

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you so much

  • @vinodjoshi1297
    @vinodjoshi1297 Жыл бұрын

    Comparison shown is very helpful to understand👍

  • @opeljas
    @opeljas Жыл бұрын

    Superb 👏

  • @arpochatterjee
    @arpochatterjee Жыл бұрын

    The way you have explained facts over here are the best way I have ever seen in any othr videos . Please do upload videos on how can we troubleshoot by checking device diagnostic logs , HAR FILES , . Inthis video the concept of azure ad registered joined and hybrid are explained the best way

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you Arpo.

  • @Sjaiswal775
    @Sjaiswal775 Жыл бұрын

    Sir you are amazing it's helping me to clear Interview... Thanks for the all knowledge you are providing...

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    That's great Shubham, i am happy for you.

  • @sathishgs17
    @sathishgs17 Жыл бұрын

    Great 👍

  • @alnassajarchitech4187
    @alnassajarchitech4187 Жыл бұрын

    Excellent video

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you

  • @shahidsayyed3159
    @shahidsayyed3159 Жыл бұрын

    Nice explanation Manish Bhai...

  • @patrick__007
    @patrick__007 Жыл бұрын

    Another great one! Thanks a lot! Keep up the good work.

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you

  • @dawood121derful
    @dawood121derful8 ай бұрын

    Well done, thank you, liked and subscribed.

  • @ManishBangia

    @ManishBangia

    8 ай бұрын

    Thanks for the sub!

  • @punithshetty544
    @punithshetty544 Жыл бұрын

    Neat Manish to the point

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you

  • @hameedshajahan3724
    @hameedshajahan3724 Жыл бұрын

    nicely explained, way too easy to understand the concept. Thanks a lot Manish Ji...

  • @AmjadKhan-zj6qf
    @AmjadKhan-zj6qf9 ай бұрын

    Nicely explained

  • @pranavrastogi8549
    @pranavrastogi85492 ай бұрын

    👌👌

  • @RayYengde
    @RayYengde Жыл бұрын

    Best explanation -after watching other videos from others

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Glad to hear that

  • @lynnecromack4933
    @lynnecromack4933 Жыл бұрын

    Just to be clear - BYOD devices dont need to be AAD regsistered, if user is using web access and email discovery?

  • @visheshkumar8015
    @visheshkumar80152 ай бұрын

    such a great explanation

  • @PrashantSharma-ql4yb
    @PrashantSharma-ql4yb Жыл бұрын

    Good Explanation

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thanks for liking

  • @jonathanchaney4037
    @jonathanchaney4037 Жыл бұрын

    excellent video, great explanation very clear.

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thanks

  • @gudamsettyravikanth210
    @gudamsettyravikanth210 Жыл бұрын

    Best Author

  • @rajatdhuldhoye5120
    @rajatdhuldhoye51204 ай бұрын

    Thank you so much sir for the help.

  • @ManishBangia

    @ManishBangia

    4 ай бұрын

    Always welcome

  • @alokgiri1224
    @alokgiri12246 ай бұрын

    excellent👌

  • @ManishBangia

    @ManishBangia

    6 ай бұрын

    Thank you! Cheers!

  • @peddaiahgopathi6609
    @peddaiahgopathi6609 Жыл бұрын

    Sir requesting you to create a video for mac management through Azure AD + intune

  • @visusrinivas2277
    @visusrinivas2277 Жыл бұрын

    everytNice tutorialng. It was still interesting. Wish I had tNice tutorials video when I started out

  • @DhanrajBarman
    @DhanrajBarman Жыл бұрын

    simplest explanation ever !

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thanks Dhanraj

  • @asifahsanullah
    @asifahsanullah3 ай бұрын

    Thank you for explaining the differences. I have a device that has evolved to being a windows 11 pro and thus has a local (legacy) account as well as is joined (mdm, has a briefcase icon) tied to my business as well as have the windows icon for multiple other client azure ad registered account. As for dsregcmd status it shows under Device Status AzureAdJoined: NO EnterpriseJoined: NO DomainJoined: NO Virtual Desktop: NO Device Name: xxxxxx I do not see any tenant info…. Thoughts please?

  • @rockgport
    @rockgport Жыл бұрын

    Sir awesome can you please make video on patch management report which is must looked for World. Wide report thru intune and same. Report we used to have in sccm

  • @shanmugankr6802
    @shanmugankr6802 Жыл бұрын

    really helpful

  • @user-jf9vx2zl3x
    @user-jf9vx2zl3x Жыл бұрын

    Not only windows device, an Android mobile can also be Azure AD registered,

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    That is correct. All devices whether Windows, Android, Apple iOS can be used as Azure AD registered device to access company resources.

  • @AbhishekSanap-dm1ez
    @AbhishekSanap-dm1ezАй бұрын

    my company laptop is azure ad join but it is still showing windows icon.

  • @vjayasekharnaidu
    @vjayasekharnaidu Жыл бұрын

    Good explained :) is that enrollment and Join , both are same?

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Thank you. Enrollment is different from Join. Azure AD Join is a one step closure to reaching the enrolling of device.

  • @arpochatterjee

    @arpochatterjee

    Жыл бұрын

    Very good question . Manish Sir if you can please elaborate on this please

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    Azure Ad Join is related to users / device joined and reporting to Azure which provides features such as implementing security and compliance policies, monitoring user activity etc. while enrolling device to Intune means taking complete control of device by targeting apps, updates etc, u can also restart, wipe the device as you are in full controll of the device. Enrolling the device requires additional intune license while Azure Ad Join does not require license.

  • @abdulhaquemohammed6478
    @abdulhaquemohammed6478 Жыл бұрын

    Hi Manish, nice explanation but how can one access corporate data/Email using personal email IDs like hotmail or gmail etc as in the case of AAD registered. Please shed some light. Thanks!

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    You can continue logging on to your Windows device or mobile phone with your current personal ID's. But you can also configure Outlook using your corporate ID, if it is enable from backend. you will be able to configure it using Email client app which automatically registers your device in Azure.

  • @rishabbanerjee5152
    @rishabbanerjee5152 Жыл бұрын

    Is there a way to do AADJ using powershell commands?

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    There is no direct powershell command to do task. You might have to create a script to provision the device joining AAD.

  • @abhijeetnegi9111
    @abhijeetnegi91113 ай бұрын

    Your first video i found : subscribed after this explanation. But please tell me this: I am watching this on my Office Device. The Azure AD logo : it is showing as Windows (That means it is Azure AD Registered ) But when i ran the command dsregcmd : It says, my device is Azure AD Joined. Confusing. Please share your inputs. Thank you, Abhijeet

  • @ManishBangia

    @ManishBangia

    3 ай бұрын

    When you click on windows /briefcase icon info. What information you see? Specifically related to "Managed by"

  • @abhijeetnegi9111

    @abhijeetnegi9111

    3 ай бұрын

    Thank you taking note of it so quick. Yes, so it says : managed by Name of the company i am working for, and this is company laptop. But since the Icon is windows, so that confused me . @@ManishBangia

  • @ManishBangia

    @ManishBangia

    3 ай бұрын

    If it is showing Managed by "your company name", it is an indication of device managed via Intune, I believe your environment is just cloud only ? (devices joined to Microsoft Entra ID only with no domain joined scenario). If that's the case, the windows icon will be shown even if it is registered and enrolled to Intune. "Managed By" information is a good way to verify the enrollment status in an easy manner.

  • Жыл бұрын

    soft... isn't it much harder to hear everytNice tutorialng as you go tNice tutorials way?

  • @arpochatterjee
    @arpochatterjee Жыл бұрын

    Also please open a TELEGRAM account so that everybody can post their questions thoughts and ideas

  • @ManishBangia

    @ManishBangia

    Жыл бұрын

    I haven't thought of it yet. I do have forums (manishbangia.com/forums) where i can answer to the questions and queries.

Келесі