AD Connect Server 2016 (where users use RDC) with Azure user and password write-back

Dale Greenaway 1 Reputation point
2020-11-27T16:44:10.12+00:00

Hi Guys,
Could use your help. Hoping you can shed some light.
We are using Windows Server 2016 AD on premise, and Azure/O365 in the cloud. All of our users connect via Windows 10 using RDC onto a virtual profile. All of our users are aligned on the 2016 server AD to the Azure/O365 user profiles where the Primary user logon's are the same.
We want to be able to write back the password from Azure to Windows Server 1016 with single sign on making Azure the primary password manager or place of reset. If MFA is enabled on all of our Azure users,
(1) Wondering what the behavior is like when users login with RDC onto the on premise where Azure is now the primary password having overwritten the on premise password?
(2) What if the virtual instance or profile per user is on 2012 and not 2016/2019? - our AD Server is on 2016
Regards,
D

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Windows for business | Windows Server | User experience | Other
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 160.4K Reputation points MVP Volunteer Moderator
    2020-11-27T19:07:16.71+00:00

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Dale Greenaway 1 Reputation point
    2020-11-28T09:10:07.537+00:00

    Thanks AndyDavid - appreciate it

    Was this answer helpful?

    0 comments
  4. Dale Greenaway 1 Reputation point
    2020-11-27T17:34:21.807+00:00

    Hi AndyDavid,

    Thanks for coming back, appreciate your reply and knowledge.

    Another Question:
    When users use RDC to logon from Windows 10 to on premise or 2012 virtual instance, will they be prompted to 2FA because MFA is enabled in Azure? - does MFA automatically get adopted into the Remote Desktop Connection login

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.