Introduction
Joining laptops and desktops to Azure AD ensures centralized management, security compliance, and easier access to cloud resources. This guide covers both manual and PowerShell methods to join a Windows device to Azure AD.
Prerequisites
Before proceeding, ensure the following: ✔ The device is running Windows 10 or later
✔ Internet connection is available
✔ You have Azure AD credentials with permissions
✔ Intune or Azure AD Join is enabled (for auto-enrollment)
✔ PowerShell script execution is allowed (for automation)
1️⃣ Manual Method: Join Windows Device to Azure AD
1️⃣ Open Settings → Accounts
2️⃣ Click Access work or school
3️⃣ Select Connect
4️⃣ Click Join this device to Azure Active Directory
5️⃣ Enter your Azure AD credentials ([email protected])
6️⃣ Click Next, verify details, and click Join
7️⃣ Restart the computer
✅ Done! The device is now part of Azure AD.
2️⃣ PowerShell Method: Automate Azure AD Join
If you manage multiple devices, PowerShell can save a lot of time by automating the Azure AD join process.
🔹 Step 1: Check the Current Join Status
powershellCopyEditGet-MDMEnrollmentStatus
📌 This command checks if the device is already joined.
🔹 Step 2: Join the Device to Azure AD
Use the Add-Computer command to join a machine to Azure AD.
powershellCopyEdit$AzureTenant = "jetmariano.us"
$User = "[email protected]"
dsregcmd /join /tenant $AzureTenant /UserName $User
📌 This command forces the device to join Azure AD.
🔹 Step 3: Verify the Join Status
powershellCopyEditdsregcmd /status
📌 The output should show AzureAdJoined : YES
3️⃣ Auto-Enroll Devices via Microsoft Intune
If you’re using Intune for device management, configure Auto-Enrollment:
1️⃣ Go to Microsoft Endpoint Manager (Intune) → Devices
2️⃣ Navigate to Enroll devices
3️⃣ Enable Automatic Enrollment for Azure AD Joined devices
4️⃣ Assign User Groups
5️⃣ Click Save
✅ Now, all new devices will be auto-enrolled into Azure AD.
4️⃣ Troubleshooting & Best Practices
- Ensure DNS resolution is correct for
jetmariano.us - Check Azure AD licenses for device management
- Use Intune for compliance policies
Summary
| Method | When to Use | Command |
|---|---|---|
| Manual | Single device setup | Settings → Accounts → Work/School |
| PowerShell | Multiple devices | dsregcmd /join |
| Intune Auto-Join | Enterprise-wide auto-enrollment | Intune Enrollment |
✅ Your Windows devices are now joined to Azure AD!