Nexthink Recognized by SIIA as the Best Digital Employee Experience Platform Learn more

Learn more

Learn more

cookie alert

We use cookies to offer you a better browsing experience, analyze site traffic, personalize content, and serve targeted advertisements. If you continue to use this site, you consent to our use of cookies.

Nexthink Library

Azure AD Registration Check

Back

Azure AD Registration Check

Latest Version: 1.0.1.0
|
Updated on April 12, 2024
Install

Description

Provides information regarding the Azure Active Directory connection, as well as some domain status information for the device.

Versions

  • 1.0.1.0 - 12 Apr 2024 - Updated OS requirements
  • 1.0.0.0 - 22 Jul 2022 - Initial release

Content

Remote actions - 1
Get Device Azure AD Status

Required Products

Nexthink Act

Platforms

Windows 10 or newer

Compatibility

V6.14 and later

This Might Interest You

Workflow: Windows 11 migration
New

Orchestrate the Windows 11 migration process with automated compatibility checks and pre-to-post migration user engagement.

Released on April 11, 2024
View Library Pack

Workflow: Device assignment verification
New

Orchestrate the verification and update of device assignee information in the ServiceNow Hardware Asset Management database through a dedicated workflow.

Released on April 10, 2024
View Library Pack

Get Device Azure AD Status

Script Description

This Remote Action can be used to gain an understanding into the Entra ID status and attributes on Windows endpoints.

The script logic uses the Microsoft command 'dsregcmd' in order to populate each output.

Please note that due to a Microsoft documented limitation, on Windows devices running Windows Hello for Businesss (WHfB) it may not be possible to output information from the NGC pre-requisites check performed by dsregcmd. In this case all the following outputs will be set as 'no'

IsUserAzureADPolicyEnabledPostLogonEnabledDeviceEligibleSessionIsNotRemoteCertEnrollment

Execution context and suggested scheduling

Run the script as 'interactive user'. In some environments it might be necessary to run as 'local system'. The script should be executed manually.

A timeout of 600 seconds is recommended.

Parameters

None.

Outputs

Label Type Description
Azure Active Directory Joined Bool Confirmation if the device is joined to the Azure AD. Default is False in case of error
Enterprise Joined Bool Confirmation if the device is joined to an on-premises DRS. A device cannot be both EnterpriseJoined and AzureAdJoined. Default is False in case of error
Domain Joined Bool Confirmation if the device is joined to a domain (AD). Default is False in case of error
Domain Name String The name of the domain if the device is joined to a domain
Workplace Joined Bool Confirmation if Azure AD registered accounts have been added to the device in the current NTUSER context. Default is False in case of error
Is user Azure Active Directory Bool Confirmation if the user is joined to the Azure AD. Default is False in case of error
Policy Enabled Bool Confirmation if the policy is enabled. Default is False in case of error
Post Logon Enabled Bool Confirmation if post logon is enabled. Default is False in case of error
Device Eligible Bool Confirmation if the device is eligible to join Azure AD. Default is False in case of error
Session Is Not Remote Bool Confirmation if the session is not remote. Default is False in case of error
Cert Enrollment String Certificate Enrollment for the NGC prerequisite check
Aad Recovery Needed Bool Confirmation if a recovery from AD is needed. Default is False in case of error
Pre Req Result String Result of the Prerequisites

Test Scenarios

StatusGatheredCorrectly
Test Case Gather the status of Azure AD
Environment VM Windows 10 x86/x64 (Multi-language) (1803/1809/1903) with both Azure AD joined and not
Results Successful - The execution obtained successfully the status