How to Register Windows 10 with Azure Active Directory
Registering Windows 10 devices with an identity provider, like Azure Active Directory, is an important part of including endpoints in the Zero Trust security model.
In this article, I’m going to show you how to register Windows 10 with Azure Active Directory. You will 1) register a Windows 10 device with Azure Active Directory using the Settings app in Windows 10 and then 2) check that the device successfully registered using the Microsoft Endpoint Manager portal.
Protecting Data and Devices using Identity
Your organization’s data is accessed by different devices, like laptops, tablets, iOS and Android mobiles. And even IoT devices. The devices may be corporate owned or personal. And users may be located within the corporate network or outside it. Under these circumstances, it is imperative to first know which devices are accessing your organization’s data and then to devise a security plan to manage it.
The security landscape is changing quickly as more and more users are working remotely and using their own devices. Without a robust security model to handle this predicament, endpoints can easily become the weakest link in your organization’s security.
Microsoft’s identity-centric Zero Trust solution requires that every user accessing an application must be verified. Zero Trust requires that all requests for access, regardless of where they originate, must be verified as if they come from an untrusted network.
All endpoints must be registered with a cloud identity provider
All devices must be registered with a single cloud identity provider, like Azure Active Directory (AD). The advantages of this approach are that it provides a centralized location to manage all your security policies, view devices, associated risks, and compliance status.
Devices registered with Azure AD are usually Bring Your Own Device (BYOD). Registration is supported not just on Windows 10 but also iOS, Android, and macOS. But when you join a Windows 10 device to AAD, users sign in to Windows using their organizational work or school account from the lock screen, either using a password, Windows Hello for Business, or FIDO2.0 security keys. It’s important to understand the difference between register and join when talking about Azure AD.
Register corporate devices with Azure Active Directory
Let’s take a look at the steps required to register a Windows 10 device with Azure AD.
- In Windows 10, access the Accounts section in Settings.
2. Click Access work or school, and then select Connect, and enter your email address and password.
More in Security
Petri Dish: Cybersecurity vs IT Security with Devolutions
Sep 28, 2022 | Russell Smith
Stop MFA Fatigue with Additional Context and Number Matching for Microsoft Authenticator
Sep 22, 2022 | Rabia Noureen
Researchers Warn About New Shikitega Malware Targeting Linux Endpoints and IoT Devices
Sep 12, 2022 | Rabia Noureen
LastPass Confirms Internal Source Code Compromised in Security Breach
Aug 26, 2022 | Rabia Noureen
Avast Gets New Ransomware Shield to Protect Small Businesses
Aug 24, 2022 | Rabia Noureen
Mandiant Warns Hackers Now Use New Trick to Bypass MFA
Aug 22, 2022 | Rabia Noureen
Most popular on petri