Azure AD Joined SSO Access to AD Joined Resources!

Only a little magic involved but SSO to AD-joined resources from an Azure AD-joined machine! Very useful.

🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!

▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
0:40 - Modern management for PCs
2:06 - AAD authentication
3:34 - Accessing ADDS trusting resources
4:38 - AAD Connect extra information
7:05 - LSA and KRBTGT
7:56 - DNS and DC communication
9:30 - Using the KRBTGT
12:22 - Demo and exploration of tokens
18:13 - Extra considerations and summary

▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► MS documentation:

▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🥇 Certification Content Repository
📅 Weekly Azure Update
☁ Azure Master Class
⚙ DevOps Master Class
💻 PowerShell Master Class
🎓 Certification Cram Videos
🧠 Mentoring Content
❔ Question about my setup?
👕 Cure Childhood Cancer Charity T-Shirt Channel Store

#microsoft #azure #johnsavillstechnicaltraining #doyouevenazure #onboardtoazure #cloud

[NTFAQGuy]

Hey everyone, welcome to another video! Please make sure to read the description for the chapters and key information about this video and others.

⚠️ P L E A S E N O T E ⚠️

🤔 I am no longer able to answer questions due to the sheer amount of comments on this channel. Sorry.
🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there!
🕰️ I don't discuss future content nor take requests for future content so please don't ask 😇

Thanks for watching!
🤙

[RetrogueStreams]

You're like my little pocket career buddy, constantly putting out content directly related to my work. In a world where it's a real challenge to keep up with the trends and tech, you're delivering value like a boss. Thank you so much mate!

[bauke-jandavids]

This came at the right time! Thank you! Just before a customer deployment. We removed hybrid join and used this instead. The AAD joined machines are able to access the SMB share required for the last non SaaS application. 👌🏻

[davidgorman]

Thanks John. This is exactly what I'm looking at in my organisation. This is definitely the way to go for us

[marcuslarsson]

That is absolutely mind-blowing, I can't wait to implement this at my office.

[ashisharya]

Once again you have explained a topic in the most simplest way. Thanks John Savill 👏👏👏🙏

[Semtx]

brilliantly described.
funnily enough this is the exact config we use in prod, i will refer my colleagues to this vid :)

[crltech]

Great Video John, this may help some of us smooth out our transition to the cloud 🙂

[amirabbasi]

Your explanation was very useful and understandable. Thanks.

[praneshhn]

Awesome John, thanks for the video and detailed explanation....

[lltagged]

Very well explained! Now the concept is clear to me. :]

[comahon]

Fantastic video. Given me a lot to think about.

[nathansen]

This is absolutely brilliant! MS docos are good when you can find the right one to explain it (thanks for providing the link) and your video is a godsend in explaining it! I tried this out today and yep, I was blown away with how it works 😀

[thedivinehairband]

This is the greatest video I've yet seen on your channel. This sort of situation is exactly where I want to be. Stuck with the hybrid join method right now. This could be my "ticket" to ditching that! 😆🤦

[expat]

Loved it, as always, but while the MSFT doco likely explains it, I'd love you to have included a few words on how the user actually authenticates to AD (it has everything but the password in the ID token from AAD) to get the TGT initially, just to put a bow on the whole circle 😉

[CloudIdentity]

Great explanation of global SSO with Azure AD PRT and how you can get enterprise SSO when you have line of sight to onprem DCs

[tony]

Amazing video John and a real game changer seeing as nearly all the use cases i come across for HAADJ is to continue accessing files/printers on prem. This eliminates all of that!

[oliverradcliffe]

I hope you keep making content until I retire 🤓

[TheKGB]

i am guessing thar older version of AD Connect on our DC needs to be updated to latest for EntraID...