Skip to content

Commit 1483943

Browse files
ReviewFeedbackFixes
1 parent fec5847 commit 1483943

File tree

4 files changed

+5
-5
lines changed

4 files changed

+5
-5
lines changed

articles/active-directory/devices/concept-device-registration.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ The goal of Microsoft Entra registered - also known as Workplace joined - device
4848

4949
Microsoft Entra registered devices are signed in to using a local account like a Microsoft account on a Windows 10 or newer device. These devices have a Microsoft Entra account for access to organizational resources. Access to resources in the organization can be limited based on that Microsoft Entra account and Conditional Access policies applied to the device identity.
5050

51-
Microsoft Entra Registration is not the same as device enrolment. If Administrators permit users to enrol their devices, organisations can further control these Microsoft Entra registered devices by enrolling the device(s) into Mobile Device Management (MDM) tools like Microsoft Intune. MDM provides a means to enforce organization-required configurations like requiring storage to be encrypted, password complexity, and security software kept updated.
51+
Microsoft Entra Registration is not the same as device enrollment. If Administrators permit users to enroll their devices, organizations can further control these Microsoft Entra registered devices by enrolling the device(s) into Mobile Device Management (MDM) tools like Microsoft Intune. MDM provides a means to enforce organization-required configurations like requiring storage to be encrypted, password complexity, and security software kept updated.
5252

5353
Microsoft Entra registration can be accomplished when accessing a work application for the first time or manually using the Windows 10 or Windows 11 Settings menu.
5454

articles/active-directory/devices/device-join-plan.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -216,7 +216,7 @@ Choose your deployment approach or approaches by reviewing the previous table an
216216

217217
## Configure your device settings
218218

219-
The [Microsoft Entra admin center](https://entra.microsoft.com) allows you to control the deployment of Microsoft Entra joined devices in your organization. To configure the related settings, brose to **Identity** > **Devices** > **All devices** > **Device settings**. [Learn more](manage-device-identities.md)
219+
The [Microsoft Entra admin center](https://entra.microsoft.com) allows you to control the deployment of Microsoft Entra joined devices in your organization. To configure the related settings, browse to **Identity** > **Devices** > **All devices** > **Device settings**. [Learn more](manage-device-identities.md)
220220

221221
<a name='users-may-join-devices-to-azure-ad'></a>
222222

articles/active-directory/devices/faq.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -139,7 +139,7 @@ sections:
139139
140140
141141
142-
- question: Can my users' sign in to Microsoft Entra joined devices that are deleted or disabled in Microsoft Entra ID?
142+
- question: Can my users sign in to Microsoft Entra joined devices that are deleted or disabled in Microsoft Entra ID?
143143
answer: |
144144
Yes. Windows has a cached username and password capability that allows users who signed in previously to access the desktop quickly even without network connectivity.
145145
@@ -254,7 +254,7 @@ sections:
254254
255255
- question: What happens if a user changes their password and tries to sign in to their Windows 10/11 Microsoft Entra hybrid joined device outside the corporate network?
256256
answer: |
257-
If a password is changed outside the corporate network (for example, by using Microsoft Entra SSPR), then the user sign in with the new password fails. For Microsoft Entra hybrid joined devices, on-premises Active Directory is the primary authority. When a device doesn't have line of sight to the domain controller, it's unable to validate the new password. So, user needs to establish connection with the domain controller (either via VPN or being in the corporate network) before they're able to sign in to the device with their new password. Otherwise, they can only sign in with their old password because of cached sign in capability in Windows. However, the old password is invalidated by Microsoft Entra ID during token requests and hence, prevents single sign-on and fails any device-based Conditional Access policies until the user authenticates with their new password in an app or browser. This issue doesn't occur if you use Windows Hello for Business.
257+
If a password is changed outside the corporate network (for example, by using Microsoft Entra SSPR), then the user sign-in with the new password fails. For Microsoft Entra hybrid joined devices, on-premises Active Directory is the primary authority. When a device doesn't have line of sight to the domain controller, it's unable to validate the new password. So, user needs to establish connection with the domain controller (either via VPN or being in the corporate network) before they're able to sign in to the device with their new password. Otherwise, they can only sign in with their old password because of cached sign-in capability in Windows. However, the old password is invalidated by Microsoft Entra ID during token requests and hence, prevents single sign-on and fails any device-based Conditional Access policies until the user authenticates with their new password in an app or browser. This issue doesn't occur if you use Windows Hello for Business.
258258
259259
260260
- name: Microsoft Entra register FAQ

articles/active-directory/devices/manage-stale-devices.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ Disable or delete Microsoft Entra registered devices in the Microsoft Entra ID.
131131
132132
## Clean up stale devices
133133

134-
While you can clean up stale devices in the Microsoft Entra admin center, it's more efficient, to handle this process using a PowerShell script. Use the latest PowerShell V2 module to use the timestamp filter and to filter out system-managed devices such as Autopilot.
134+
While you can clean up stale devices in the Microsoft Entra admin center, it's more efficient to handle this process using a PowerShell script. Use the latest PowerShell V2 module to use the timestamp filter and to filter out system-managed devices such as Autopilot.
135135

136136
A typical routine consists of the following steps:
137137

0 commit comments

Comments
 (0)