Configure device identities

Configure device identities in Microsoft Entra ID (formerly Azure AD). In modern enterprise environments, device identity configuration is a core part of identity and access management. Microsoft Entra ID supports three primary device identity types: registered devices, joined devices, and hybrid joined devices. Each type targets different ownership models, management approaches, and application compatibility requirements.

​

Microsoft Entra ID device types

• Registered devices
  • Usually personal (BYOD) devices that users register with Microsoft Entra ID to access organizational resources.
  • May remain unmanaged unless enrolled in an MDM solution like Microsoft Intune.
  • Supported platforms include Windows 10/11, iOS, Android, and macOS.

• Joined devices
  • Corporate-owned devices that are joined directly to Microsoft Entra ID.
  • Users sign in with their work or school accounts.
  • Designed for cloud-first Windows 10/11 scenarios and enable cloud-based controls such as Conditional Access.

• Hybrid joined devices
  • Devices joined to on-premises Active Directory and also registered in Microsoft Entra ID.
  • Ideal for organizations that need on-premises resource access and cloud integration.
  • Typically managed with existing on-prem tools (Group Policy) and useful for system images or older Windows releases.

​

Quick comparison

Each option has trade-offs:

• Registered devices offer flexibility for users and BYOD programs.
• Joined devices enable stronger corporate control and simpler Conditional Access enforcement.
• Hybrid joined devices preserve compatibility for legacy systems while integrating with cloud identity.

​

View devices in the Azure portal

To inspect device records for your tenant:

1. Sign in to the Azure portal.
2. Open Microsoft Entra ID (or Azure Active Directory in older UI).
3. Select Devices to view the device list and status.

The portal shows device join and management states such as “Entra joined” (Azure AD joined), “Registered”, or “Hybrid joined”. Device details include Device ID, OS, join type, owner, and MDM enrollment status (for example, MDM: None means the device is not enrolled in an MDM like Intune).

​

Common device fields explained

​

Join a Windows 10/11 device to Microsoft Entra ID

To join a Windows device directly to Microsoft Entra ID:

1. Open Settings.
2. Navigate to Accounts > Access work or school.
3. Click Connect and sign in with your work or school account.
4. Follow the prompts to complete the join. (Older UI labels may display “Azure AD”.)

If a personal device is added without Intune enrollment, it will appear as a registered device. If you join a corporate device using a work account, it will appear as a joined device.

​

Troubleshooting tips

• Ensure Azure AD Connect is healthy and syncing for hybrid join scenarios.
• Verify network requirements and device time settings; misconfigured time can prevent joins.
• Check Intune enrollment status if device configuration or compliance policies are missing.
• Use the device’s Properties in the Entra portal to confirm join type and MDM status.

​

Links and references

• Microsoft Entra ID device management overview: https://learn.microsoft.com/en-us/azure/active-directory/devices/
• Azure AD Join vs. Hybrid Azure AD Join: https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-plan
• Intune device enrollment: https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment

That completes the device identities overview for Microsoft Entra ID. User and group management is covered in a separate article.