Categories
Azure Active Directory Azure AD AzureAD device device registration hybrid

Configuring Hybrid Device Join On Active Directory with SSO

The instructions from Microsoft at https://docs.microsoft.com/en-us/azure/active-directory/device-management-hybrid-azuread-joined-devices-setup are missing some of the steps on setting up hybrid device join to Azure AD. This is a complete list of steps when Pass-Thru auth with SSO is enabled on the domain. Enable SSO – this is covered elsewhere. You can also do hybrid device join on a federated […]

Categories
Authentication Azure Active Directory Azure AD Office Office 365 SSO

Azure AD SSO and Disabled Computer Accounts

When you set up Azure AD SSO, the Azure AD Connect application creates a computer account called AZUREADSSOACC. Do not disable this account, or SSO stops working. I’ve had a few clients in the past week disable this when generally disabling all the computer accounts that have not logged in for X days. Therefore if […]

Categories
AADConnect active directory Azure Active Directory Azure AD sync error

AADConnect Password Reset Date Sync Issues

Got this error the other day at a client and found nothing listed on Internet search for it, which of course means only I have this issue! But even so, lets get to see what it means and how to fix it. The error turned up in the AADConnect tool and it reported sync-generic-failure on […]

Categories
Azure Azure Active Directory MFA Multi-Factor Authentication Office 365

Azure MFA 503 Error When Authenticating

If you have installed version 7 of Azure MFA Server on-premises (7.0.0.9 or 7.0.2.1 at the time of writing) and have enabled IIS authentication with Forms Based authentication and the Native App, but when you need to authenticate you are presented with a 503 DLL error. The reason for this is that version 7 removed […]

Categories
AADConnect az Azure Active Directory Azure AD dirsync Office 365

OU Filtering in AADConnect–What They Grey Boxes Mean

So I had the chance to check this today. If you do OU filtering in the DirSync tools you will get an OU structure with various grey boxes in it. Here is an example: It appears that both and are options in the sync tool. You get the first (grey with a tick ) if […]

Categories
Azure Active Directory remote desktop

Remote Desktop And Login With AzureAD Account

If you join a Windows 10 PC to Azure AD and then try and login to that PC over remote desktop you are in for a barrel of laughs! Or not! The way to get it to work is as follows: Ensure that Windows 10 PC is running Version 1511 or later (type WinVer from […]

Categories
Azure Azure Active Directory MFA Multi-Factor Authentication Office 365

Upgrading Azure Multi-Factor Authentication Server

A new version of Azure MFA Server was released at the end of March 2016, version 7.0.0.9. This provides an in place upgrade to the previous version 6.3.1.1. This version is based on .NET 4.5 and not .NET 2.0, which is the big change in the product, along with new end user functionality in the […]

Categories
Azure Azure Active Directory Group Policy IAmMEC Office 365 password

Password Writeback Errors

I had been struggling with password writeback testing and was coming across the following set of errors, and found that searching for them uncovered nothing online. So I wrote this blog to remind me and help you solve these issues. These errors are all visible in the Application log of the Event Viewer. User Restrictions […]

Categories
2008 2008 R2 2012 2012 R2 active directory ADFS 3.0 Azure Azure Active Directory cloud exchange exchange online groups hybrid IAmMEC Office 365 WAP Web Application Proxy windows

Configuring Sync and Writeback Permissions in Active Directory for Azure Active Directory Sync

[Last updated 11th November 2019 – added support for Exchange Server automapping support, which was announced during Microsoft Ignite 2019 and will be supported in the first half of calendar year 2020. This is supported by adding writeback for msExchDelegateListBL and msExchDelegateListLink attributes. The below Exchange Hybrid writeback script has been updated to support these […]