- Joined
- Apr 5, 2001
- Location
- St. Catharines, Ontario Canada
Right. So I'm in over my head.
It started off with me being pissed off about how the org I work for handles mobile device deployments. They took too long and were managed by UEM and not managed well at that. So when I was given the keys to the kingdom for Intune, I took to it and learned a lot and I finally have mobile devices working as they should, with ADE and soon ZeroTouch enabled devices being deployed.
However, the higher-ups took notice of my drive (fueled by spite, no less) and said "hey, this kid seems to know what he's doing! Let's make up the title Endpoint Administrator and make him handle workstation deployments in Azure as well!" To which I said "yay, more money!" and dove in and now I'm here. They even said they'd add more money if I took and pass MD-100 and MD-101, which I took, and passed (hooray!).
So I've inherited our tenant with the overarching goal of 'Make Azure AD work for us', and I've done pretty OK so far. I've got a few devices in Autopilot and deployed as test machines. But like I said, I inherited the tenant and it's a gd nightmare. Nobody knew what they were doing when we originally set it up and now it's a mess that I have to untangle first. Now to my problem:
So there are more than a few (50 or so) devices listed in the Devices blade of Azure. I know if I flip the switch to Hybrid-join devices, all those devices get hybrid-joined and synced back to on-prem AD. I don't want that. What I guess I need is a solution to prune the old devices, and then I have to figure out what to do next to either stop those devices from syncing back to on-prem, or at least have them sync correctly. Am I making any sense? I hope I am. Any help with Azure would be appreciated.
It started off with me being pissed off about how the org I work for handles mobile device deployments. They took too long and were managed by UEM and not managed well at that. So when I was given the keys to the kingdom for Intune, I took to it and learned a lot and I finally have mobile devices working as they should, with ADE and soon ZeroTouch enabled devices being deployed.
However, the higher-ups took notice of my drive (fueled by spite, no less) and said "hey, this kid seems to know what he's doing! Let's make up the title Endpoint Administrator and make him handle workstation deployments in Azure as well!" To which I said "yay, more money!" and dove in and now I'm here. They even said they'd add more money if I took and pass MD-100 and MD-101, which I took, and passed (hooray!).
So I've inherited our tenant with the overarching goal of 'Make Azure AD work for us', and I've done pretty OK so far. I've got a few devices in Autopilot and deployed as test machines. But like I said, I inherited the tenant and it's a gd nightmare. Nobody knew what they were doing when we originally set it up and now it's a mess that I have to untangle first. Now to my problem:
So there are more than a few (50 or so) devices listed in the Devices blade of Azure. I know if I flip the switch to Hybrid-join devices, all those devices get hybrid-joined and synced back to on-prem AD. I don't want that. What I guess I need is a solution to prune the old devices, and then I have to figure out what to do next to either stop those devices from syncing back to on-prem, or at least have them sync correctly. Am I making any sense? I hope I am. Any help with Azure would be appreciated.
