Hybrid Join Renaming Manually

Question

question

Sean076 asked Dec 1, '21 JamesTran-MSFT commented Jan 3, '22

Hybrid Join Renaming Manually

Hello

As everyone knows, renaming a hybrid joined device is not supported.

I am trying to do this manually but need an expert insight into what issues may arise by the method I am using:

Hybrid join runs - has a crazy name....this is where the steps start:
Rename the device thru windows while on VPN
reboot
Rename AzureAD Object: Set-AzureADDevice -ObjectId <objectID> -DisplayName <intended on prem AD name>
Rename Hybrid Azure AD object: Set-AzureADDevice -ObjectId <objectID> -DisplayName <intended on prem AD name>
Gpupdate /force to update PKI cert
Install SCCM Agent

Please by all means tell me what I'm doing wrong or right - leaving it a alphanumeric name is not acceptable in my environment and hoping to complete this as easy as possible for both end user and technician.

DSregcmd /status appears to show the computers is in an OK state however on the Azure side - the azure object has some unknowns (OS/OS version) and on the intune side, it no longer shows corporate or personal (listed as unknown, greyed out).

Thanks in advance,
Sean

windows-10-setup mem-intune-enrollment mem-autopilot azure-ad-hybrid-identity

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JamesTran-MSFT · Jan 03 at 11:32 PM

@Sean076
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 ·

Answer 1 · 2021-12-02T08:40:02.28Z

SimonRenMSFT-3639 answered Dec 2, '21

Hi,

Thanks for posting in Microsoft Q&A forum.

1,You could try to delete the cert and regenerate a new certificate. Similar thread for your reference:
Renewing machine cert after hybrid joined device rename

2,Some other threads for your reference:
Renaming hybrid joined machines
Renaming Autopilot-deployed Hybrid Azure AD Join devices

Thanks for your time.

Best regards,
Simon

If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2021-12-07T16:26:57.507Z

Jason-MSFT answered Dec 7, '21

As everyone knows, renaming a hybrid joined device is not supported.

No one knows this as it is not a true statement. You cannot rename an HAADJ device from MEM admin console, but that doesn't mean that you can't, or it isn't supported to rename the device locally.

There's nothing special about renaming an HAADJ device as long as you rename it locally as noted and while it has connectivity to the on-prem domain that it is joined to -- you should be able to rename it while it is not connected as well but the changes won't be fully effective and propagated until it connects again. AAD Connect will also have to kick off its sync cycle (by default this is every 30 minutes from memory) for the rename to fully propagate as well.

There's no reason to manually rename any objects in AAD for this and that may actually cause issues.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question