AzureAD domain join / hybrid join

[jmak]

I appreciate that Office 365 (user) accounts are Azure AD (user) accounts. But what I was asking about is Azure AD/Hybrid joining, and what this extra cost is that has been mentioned?

 

Are there any issues with A1 in relation to Hybrid joined? Can computer objects be syncronised to AzureAD? Can replication happen in reverse (AzureAD > AD)? If not, does this matter?

 

Thanks, Bruce.

I had user and computer accounts in hybrid Azure AD on a free A1 licence. Write back from Azure to on premises was not included.

 

I did add a P1 Azure AD licence, which I think does allow write back, but I bought it for the Conditional Access features to control what devices you could access our Teams/SharePoint libraries from (leveraging the fact that the machines were already hybrid joined to limit access to our domain machines).

 

I think the extra licence that's being talked about here is the InTune management licence. You'll need hybrid AD set up to use that, but one of the things it can do is join a machine that's sent directly to staff or pupil and join it to said domain without you ever seeing the machine.