14
votes
Accepted
How to give file permissions to AzureAD user on windows 10?
Thanks to Arni on this thread for the answer:
You can try the following command line. After adding an ACL entry, the
Security dialog will display the user and you can change the
permissions ...
- 1,850
12
votes
Accepted
How do I add an AzureAD user to SQL Server for windows authentication
I couldn't find any users through the UI but I was able to add a login like this:
create login [AzureAD\FirstLast] from windows;
- 1,850
10
votes
Accepted
What Does the "Use this account everywhere on your device" Dialog Do?
Yes, you are correct. Selecting the option to allow my organization to manage my device registers your device in your organization’s Azure AD. It is called Workplace Join.
It doesn’t mean much else ...
- 11.5k
9
votes
How to give file permissions to AzureAD user on windows 10?
My cheating way: Add the Azure user to a unique local group
"net localgroup groupname domain\user /add"
Then give local group permissions
- 91
6
votes
Accepted
Get-AzureADUser reference of all available fields
To see a list of all the attributes on an Azure AD user object:
Get-AzureADUser -Top 1 | gm -MemberType Properties
To see an Azure user and all their properties:
Get-AzureADUser -Top 1 | Format-...
- 3,605
4
votes
Securing access to a VM-based web server with Azure Active Directory
There are several ways to manage authentication in Azure and especially for large organizations that use Active Directory / Azure AD directories. But for your case, you have to use exclusively Azure ...
- 141
3
votes
Unable to set Azure Active Directory Admin as user greyed out?
but you can see that I am unable to select my account. Why would this
be?
Currently, Microsoft accounts (like live.com, outlook.com) cannot be set as admin. Only users and security groups within ...
- 327
3
votes
Determine Azure AD Device Id
If these are Win10 machines open a command prompt try: dsregcmd /status
- 31
2
votes
Azure AD disappeared from Azure management portal
The directories you see listed (and have access to) in the Azure portal are directories that you (as the identity you use to sign in to the Azure portal) are a member of.
What likely happened is that ...
2
votes
Accepted
Windows 10 NTFS permissions for Azure AD account
Newer versions show the actual domain name, but the same issue still exists. You can use Powershell to set the permissions.
$dir = get-item -Path 'C:\users\jshelby\Desktop\testdir\'
$acl =...
- 1,318
2
votes
Securing access to a VM-based web server with Azure Active Directory
There are a ton of ways to get this up, but I'll quickly go over some of the alternatives I am more familiar with.
I'll be referring to Azure Active Directory as AAD throughout this.
What is AAD
...
- 516
2
votes
Accepted
Azure required packages installation using "yum"
As per the Microsoft documentation, for Ubuntu you need :
sudo apt-get install krb5-user samba sssd sssd-tools libnss-sss libpam-sss ntp ntpdate realmd adcli
See Join an Ubuntu virtual machine in ...
- 2,668
2
votes
What Does the "Use this account everywhere on your device" Dialog Do?
This settings can also break things in Windows/Office.
In Office, having your company email address added to this setting can prevent you from successfully changing your password for Office programs ...
- 21
2
votes
Determine to which PSSession a command belongs to?
Use prefixes when using imported cmldets.
Import-PSSession
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/import-pssession?view=powershell-7.1
Import-PSSession
[-...
- 4,551
2
votes
Accepted
Persist user selection on login screen after reboot on Windows 11
Based on the comments, the following changes to Group Policy were sufficient to achieve what I required.
Using gpedit, modify the following:
Computer Configuration > Administrative Templates > ...
- 7,837
1
vote
Accepted
Closing Microsoft 365 tenant while keeping mailboxes open in Outlook
Yes, it's actually easy to export the data to a local .pst in Outlook client(File> Open & Export> Import/Export>Export to a file), and you could import the file to another account or open ...
- 712
1
vote
Removed laptop from Azure AD Devices - non admin user on device can't log off unlink Microsoft account
you can try to boot with some Linux distro and once done go to the old C:\windows\system32 (very of the it mounted on Z:)
Once there you can rename the utility manager (utliman.exe)
ren Utilman.exe ...
1
vote
Accepted
Azure AD user replication to onsite AD server
It would be nice but at this time this is and unplanned feature for the azure team. The only forms of writeback that are supported is password writeback, and device writeback unfortunately.
Source: ...
1
vote
O365 - Multifactor Auth - Access Authentication Phone via Powershell
A little rewrite of Kathy's answer
Get-MsolUser -All | where{
$_.StrongAuthenticationRequirements.State -ne ""
} | Select DisplayName,@{Name="MFAPhone";Expression={$_....
1
vote
Accepted
O365 - Multifactor Auth - Access Authentication Phone via Powershell
Using below code, you can get a list of MFA enabled users with Authentication Phone number.
$Result=""
$Results=@()
Get-MsolUser -All | where{$_.StrongAuthenticationRequirements.State -ne ""}...
- 118
1
vote
Error code AADB2C90157 from Azure AD B2C while login
This could happen when you have reached maximum retries with errors when using an email address to reset a password which has never been registered by the user.
You can reproduce it with a password ...
- 11
1
vote
Accepted
Azure AD user's group membership
You are right!
Once we login a Windows 10 machine (Azure AD joined) with an Azure AD account, the current logon user has the group you mentioned: NT AUTHORITY\Cloud Account Authentication.
Here is ...
- 111
1
vote
Setting up Azure Federation
With your want, you could use Azure AD Connect to sync your local to Azure AD. By Synchronizing users’ identities between local and Azure AD, this could let users access different resources in both ...
- 111
1
vote
Accepted
Can't join Azure Active Directory
I think you have known how to join your device to Azure AD. In this case, I'd like to explain some things to you.
For the Alternate Actions, A workstation group PC (non-domain joined computer) can ...
- 178
1
vote
How to use Azure AD SSO SAML for Jira, when Jira is also already setup to use local AD
Turns out to do this you only have to make one change. In the Azure portal, go to Azure AD and find the Jira SAML SSO app registration (this same thing would probably work for other SAML/SSO apps ...
1
vote
Azure AD Integrated auth on a standalone machine
AzureAD is just a directory. The Auth flow can occur in a few different ways (Microsoft supplied versions).
AzureAD native cloud accounts and password. Authentication and
authorization all happen ...
- 1,318
1
vote
Accepted
Disable ADAL via Registry per computer
Judging from a Process Monitor session, it does not appear that Office programs consult the HKLM version of that value, even when the Identity key exists there. This Office support document (albeit ...
- 39.8k
1
vote
Determine Azure AD Device Id
I also ran into this issue when trying to rename Azure AD devices. Following @munrobasher's comment, the Device ID can be found as a key name at the following registry location:
HKEY_LOCAL_MACHINE\...
- 111
1
vote
accessing an azure AD via its LDAP url
Historically Azure AD (AAD) has been a directory for user authentication but has lacked the LDAP directory features that a regular Windows Server AD provides. Depending on application type and ...
- 11
1
vote
Accepted
Azure AD - Can't make any changes to the directory from domain joined VM
So this just seems to be one of the limitations of AAD Domain
Services.
Yes, you had better to understand Synchronization from your Azure AD tenant to your managed domain
User accounts, group ...
- 462
Only top scored, non community-wiki answers of a minimum length are eligible