Skip to content

Commit 1f01d37

Browse files
authored
Merge pull request #78729 from SanDeo-MSFT/patch-9
Update hybrid-azuread-join-control.md
2 parents a1d5ec2 + a929386 commit 1f01d37

File tree

1 file changed

+4
-10
lines changed

1 file changed

+4
-10
lines changed

articles/active-directory/devices/hybrid-azuread-join-control.md

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -29,14 +29,9 @@ To do a controlled validation of hybrid Azure AD join on Windows current devices
2929

3030
1. Clear the Service Connection Point (SCP) entry from Active Directory (AD) if it exists
3131
1. Configure client-side registry setting for SCP on your domain-joined computers using a Group Policy Object (GPO)
32-
1. If you are using AD FS, you must also:
33-
1. Configure the client-side registry setting for SCP on your AD FS server using a GPO
34-
1. Uncheck “Automatically remove unused devices” under Services > Device Registration > Properties
32+
1. If you are using AD FS, you must also configure the client-side registry setting for SCP on your AD FS server using a GPO
3533

36-
> [!NOTE]
37-
> Ensure default configuration remains unchanged for “Register domain-joined computers as devices” GPO set to “Not Configured” and “Automatically register new Windows 10 domain joined devices with Azure Active Directory” set to “Yes” when using Configuration Manager.
3834

39-
After you verify that everything works as expected, you can automatically register the rest of your Windows current devices with Azure AD by [configuring SCP using Azure AD Connect](hybrid-azuread-join-managed-domains.md#configure-hybrid-azure-ad-join).
4035

4136
### Clear the SCP from AD
4237

@@ -50,8 +45,6 @@ Use the Active Directory Services Interfaces Editor (ADSI Edit) to modify the SC
5045
1. Select the values of **azureADId** and **azureADName** (one at a time) and click **Remove**
5146
1. Close **ADSI Edit**
5247

53-
> [!NOTE]
54-
> If a SCP is not configured in AD, then you should follow the same approach as described to [Configure client-side registry setting for SCP](#configure-client-side-registry-setting-for-scp)) on your domain-joined computers using a Group Policy Object (GPO).
5548

5649
### Configure client-side registry setting for SCP
5750

@@ -96,9 +89,10 @@ The installer creates a scheduled task on the system that runs in the user conte
9689
To control the device registration, you should deploy the Windows Installer package to your selected group of Windows down-level devices.
9790

9891
> [!NOTE]
99-
> If SCP is not configured in AD, then you should follow the same approach as described above to configure the client-side registry setting for SCP on your domain-joined computers using a Group Policy Object (GPO).
92+
> If a SCP is not configured in AD, then you should follow the same approach as described to [Configure client-side registry setting for SCP](#configure-client-side-registry-setting-for-scp)) on your domain-joined computers using a Group Policy Object (GPO).
93+
10094

101-
After you verify that everything works as expected, you can automatically register the rest of your Windows down-level devices with Azure AD by deploying the package to all down-level devices and [configuring SCP using Azure AD Connect](hybrid-azuread-join-managed-domains.md#configure-hybrid-azure-ad-join).
95+
After you verify that everything works as expected, you can automatically register the rest of your Windows current and down-level devices with Azure AD by [configuring SCP using Azure AD Connect](hybrid-azuread-join-managed-domains.md#configure-hybrid-azure-ad-join).
10296

10397
## Next steps
10498

0 commit comments

Comments
 (0)