Azure AD Join and Azure AD registration - Exam AZ-104: Microsoft Azure Administrator

[@syncj838]

Hey Mike, am I correct in saying any user that AAD joins their device is granted local administrator rights automatically to their particular device? Is there anyway of stopping this without having to manually remove from the local admin group after the fact?

[@mwcloud]

I believe so, but I am going to have to check if intune can do something about that.

[@syncj838]

@@mwcloud that would be good I am curious!

[@M_Y_Wolde]

My understanding is that only machines that run Windows 10/11 can be AZ joined. Home edition cannot be AZ joined. But can home edition be AZ registered?
Great video as usual.

[@mwcloud]

That is correct, you can confirm that with the documentation here learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register

[@M_Y_Wolde]

@@mwcloud thanks for the link. the documentation does not specify which versions of Windows can be AD registered. But it does say that iOS and android can be. So I guess it is safe to assume that Windows Home edition can also be ad registered?

[@mwcloud]

@@M_Y_Wolde correct, as registration is for BYOD and people with their own devices would have home version, AD Join is not home as specified here learn.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join