Merge pull request #111496 from billmath/pta2

updating

Author: v-albemi

articles/active-directory/hybrid/TOC.yml

@@ -210,6 +210,8 @@
       href: how-to-connect-pta-quick-start.md
     - name: Pass-through authentication FAQ
       href: how-to-connect-pta-faq.md
+    - name: Disable PTA with Azure AD Connect "Do not configure"
+      href: how-to-connect-pta-disable-do-not-configure.md
   - name: Manage Federation Services
     items:
     - name: Managing federation with Azure AD Connect

articles/active-directory/hybrid/how-to-connect-pta-disable-do-not-configure.md

@@ -0,0 +1,54 @@
+---
+title: 'Disable PTA when using Azure AD Connect "Do not configure" | Microsoft Docs'
+description: This article describes how to disable PTA with the Azure AD Connect "do not configure" feature.
+services: active-directory
+author: billmath
+manager: daveba
+ms.service: active-directory
+ms.topic: reference
+ms.workload: identity
+ms.date: 04/20/2020
+ms.subservice: hybrid
+ms.author: billmath
+ms.collection: M365-identity-device-management
+---
+
+
+# Disable PTA when using Azure AD Connect "Do not configure"
+
+If you are using Pass-through Authentication with Azure AD Connect and you have it set to "Do not configure", you can disable it. Disabling PTA can be done using the following cmdlets. 
+
+## Prerequisites
+The following prerequisites are required:
+- Any windows machine that has the PTA agent installed. 
+- Agent must be at version 1.5.1742.0 or later. 
+- An Azure global administrator account in order to run the PowerShell cmdlets to disable PTA.
+
+>[!NOTE]
+> If your agent is older then it may not have the cmdlets required to complete this operation. You can get a new agent from Azure Portal an install it on any windows machine and provide admin credentials. (Installing the agent does not affect the PTA status in the cloud)
+
+> [!IMPORTANT]
+> If you are using the Azure Government cloud then you will have to pass in the ENVIRONMENTNAME parameter with the following value. 
+>
+>| Environment Name | Cloud |
+>| - | - |
+>| AzureUSGovernment | US Gov|
+
+
+## To disable PTA
+From within a PowerShell session, use the following to disable PTA:
+1. PS C:\Program Files\Microsoft Azure AD Connect Authentication Agent> `Import-Module .\Modules\PassthroughAuthPSModule`
+2. `Get-PassthroughAuthenticationEnablementStatus -Feature PassthroughAuth` or `Get-PassthroughAuthenticationEnablementStatus -Feature PassthroughAuth -EnvironmentName <identifier>`
+3. `Disable-PassthroughAuthentication  -Feature PassthroughAuth` or `Disable-PassthroughAuthentication -Feature PassthroughAuth -EnvironmentName <identifier>`
+
+## If you don't have access to an agent
+
+If you do not have an agent machine you can use following command to install an agent.
+
+1. Download the latest Auth Agent from portal.azure.com.
+2. Install the feature: `.\AADConnectAuthAgentSetup.exe` or `.\AADConnectAuthAgentSetup.exe ENVIRONMENTNAME=<identifier>`
+
+
+## Next steps
+
+- [User sign-in with Azure Active Directory Pass-through Authentication](how-to-connect-pta.md)