question

Polo22-1119 avatar image
0 Votes"
Polo22-1119 asked Polo22-1119 answered

GPO and hybrid AD

Hi there,
I have a question regarding GPO in AD hybrid mode (on prem AD & AAD):

Can local domain GPOs apply on my computer if Im not on the local network but outside? Or its impossible with an hybrid mode to receive GPO from the local Active Directory

Thanks for the clarification

azure-active-directorywindows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AlanKinane avatar image
0 Votes"
AlanKinane answered AlanKinane commented

You would have to be connected to your domain controller (via VPN for example) in order to receive the GPOs from your AD environment. The fact that your have an AD hybrid would not help here. Alternatively you could look into using Administrative Templates from Microsoft Endpoint Manager as a means to provide policies directly from the cloud.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Not really. You would have to set up local group policies on each device. The devices ideally need to be domain joined (or Hybrid joined) so you can use a centralised domain group policy and push your GPOs from your domain controllers. Otherwise, you can still use Microsoft Endpoint Manager if they are Azure AD joined but in a workgroup.

1 Vote 1 ·

allright, and one last question , if my computer is in workgroup, in the local network, but joined to Azure AD domain, it stills not possible to receive GPO right ?

0 Votes 0 ·
Polo22-1119 avatar image
0 Votes"
Polo22-1119 answered

I understand thank you !

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.