You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/devices/overview.md
+4-5Lines changed: 4 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -30,7 +30,7 @@ In a mobile-first, cloud-first world, Azure Active Directory (Azure AD) enables
30
30
31
31
Through devices in Azure AD, your users are getting access to your corporate assets. To protect your corporate assets, as an IT administrator, you want to manage these devices identities. This enables you to make sure that your users are accessing your resources from devices that meet your standards for security and compliance.
32
32
33
-
Device identity management is also the foundation for [device-based Conditional Access](../conditional-access/require-managed-devices.md). With device-based Conditional Access, you can ensure that access to resources in your environment is only possible with managed devices.
33
+
Device identity management is also the foundation for [device-based conditional access](../conditional-access/require-managed-devices.md). With device-based conditional access, you can ensure that access to resources in your environment is only possible with managed devices.
34
34
35
35
## Getting devices in Azure AD
36
36
@@ -41,7 +41,7 @@ To get a device in Azure AD, you have two options:
41
41
42
42
**Registering** a device to Azure AD enables you to manage a device’s identity. When a device is registered, Azure AD device registration provides the device with an identity that is used to authenticate the device when a user signs-in to Azure AD. You can use the identity to enable or disable a device.
43
43
44
-
When combined with a mobile device management(MDM) solution such as Microsoft Intune, the device attributes in Azure AD are updated with additional information about the device. This allows you to create Conditional Access rules that enforce access from devices to meet your standards for security and compliance. For more information on enrolling devices in Microsoft Intune, see [What is device enrollment?](https://docs.microsoft.com/intune/device-enrollment)
44
+
When combined with a mobile device management(MDM) solution such as Microsoft Intune, the device attributes in Azure AD are updated with additional information about the device. This allows you to create conditional access rules that enforce access from devices to meet your standards for security and compliance. For more information on enrolling devices in Microsoft Intune, see [What is device enrollment?](https://docs.microsoft.com/intune/device-enrollment)
45
45
46
46
**Joining** a device is an extension to registering a device. This means, it provides you with all the benefits of registering a device and in addition to this, it also changes the local state of a device. Changing the local state enables your users to sign-in to a device using an organizational work or school account instead of a personal account.
47
47
@@ -68,6 +68,7 @@ The goal of Azure AD joined devices is to simplify:
68
68
- Windows deployments of work-owned devices
69
69
- Access to organizational apps and resources from any Windows device
70
70
- Cloud-based management of work-owned devices
71
+
- Users to sign in to their devices with their Azure AD or synced Active Directory work or school accounts.
71
72
72
73

73
74
@@ -134,12 +135,10 @@ As a rule of a thumb, you should use:
134
135
- Azure AD joined devices:
135
136
- For devices that are owned by your organization
136
137
- For devices that are **not** joined to an on-premises AD
137
-
- To manually register devices with Azure AD
138
138
- To change the local state of a device
139
139
- Hybrid Azure AD joined devices for devices that are joined to an on-premises AD
140
140
- For devices that are owned by your organization
141
141
- For devices that are joined to an on-premises AD
142
-
- To automatically register devices with Azure AD
143
142
- To change the local state of a device
144
143
145
144
## License requirements
@@ -153,4 +152,4 @@ As a rule of a thumb, you should use:
153
152
- Azure Active Directory registered Windows 10 devices, see [How to configure Azure Active Directory registered Windows 10 devices](../user-help/device-management-azuread-registered-devices-windows10-setup.md).
154
153
- Azure Active Directory joined devices, see [How to plan your Azure Active Directory join implementation](azureadjoin-plan.md).
155
154
- Hybrid Azure AD joined devices, see [How to plan your hybrid Azure Active Directory join implementation](hybrid-azuread-join-plan.md).
156
-
- To learn more about device-based Conditional Access, see [Configure Azure Active Directory device-based Conditional Access policies](../conditional-access/require-managed-devices.md).
155
+
- To learn more about device-based conditional access, see [Configure Azure Active Directory device-based conditional access policies](../conditional-access/require-managed-devices.md).
0 commit comments