- [Instructor] Azure Active Directory Join
ensures that devices that are accessing your resources
meet your standards for security and compliance.
To configure Azure Active Directory Join,
you will do so via Azure Active Directory
and then devices.
And you'll find that under manage.
You will notice I have a list
of several devices that I have managed
using Azure Active Directory Join,
and all of them are noncompliant.
That has nothing to do with the service.
I haven't signed into these devices for months.
And this is a perfect example
how you can quickly see the status of the devices
that have access to your resources.
We're gonna focus in on configuring the device settings.
And you'll find that under manage and then device settings.
Our first setting allows users to join devices
to Azure Active Directory.
You can allow all users or a subset of users, or none.
We're gonna leave it at all users.
Next, we can allow select users
to be granted local admin rights on the device.
Now, there are two things that you must keep in mind here.
The users that you allow this right
will be added to the Device Administrators role
in Azure Active Directory.
You can go ahead and add members as required.
The second point that you must be aware of,
is your existing global admins in Azure Active Directory
already have this right.
I'm gonna leave it at none.
The next option, users may register their devices with
Azure Active Directory.
In my example it's grayed out,
and this is because I do not have Intune or MDM
for Office 365 enabled.
If I did have either of those set up,
then the all would be selected.
Next, we can require that our users use MFA
to join devices,
and remember that is a Microsoft recommendation.
I'm gonna leave it set to no.
We can also restrict the maximum number of devices
that can access our resources per user.
I think five is a little bit more reasonable
than 20.
And finally, we can allow users to sync setting
and app data across our devices.
Now, this is a little misleading.
If enabled, the settings and app data will sync across
Windows 10 devices only, and it is only available
when you have Azure Active Directory Premium or EMS.
You can now go ahead and click save.
For our demonstration I'm gonna just go ahead and close.
Before we finish up,
a quick overview of the management options.
I'm gonna go ahead and select the second item,
and from here we can go ahead
and further manage this device.
We can disable it or delete it.
For the exam, I would recommend you review
some of the finer details of device management
through Azure.