This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 90%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECD%3C/text%3E%3C/svg%3E)
Good evening,
I have a challenge regarding Azure Active Directory and I wonder, wether someone can help me with it.
My Client want's me to provide a prototype for a Microsoft Store for Business. As deployment platform we want to use Endpoint Configuration Manager.
I already set up a app registration inside our AAD and started synchronizing Apps. Deploying offline apps is already working. I have problems deploying online apps. According to Microsofts documentation I need a Azure AD (hybrid) joined device and a Azure AD user to install online apps from Business Store through ECM. In a testing environment I enabled Hybrid Azure Active Directory Join for devices and Pass Through Authentication for users. I configured our GPO's to join my testing devices to AAD.
With dsregcmd I confirmed that this works.
In our environment all users sign in with their On Premise AD Account and we'd like to keep it that way. Therefore installing online apps is not possible. As solution i tried adding a "Work Account" in Windows settings. After adding this account Application deployment works. Now my question is: Is it possible to automate this task that the Azure AD account is linked automatically? Or is there another way to deploy online apps through ECM?
I'm sorry if this question is a little confusing. I'm a Azure newbie. I appreciate any help. Thanks
Do the users also have a hybrid identity; i.e., are the on-prem AD user accounts also be synced to Azure AD using AAD Connect? If so, that is all that is required to deploy apps from the Microsoft Store for Business to users using ConfigMgr. No client-side configuration or logins are required.
Thank you for your quick response. I think my users are synchronized to AAD. Inside the AAD Connect wizard i specified that my OU will be synchronized and I can see my useraccount inside my Azure AD Portal.
Nevertheless I get error code 0x80190194 in my AppEnforceLog. If I select install on a online app in my softwarecenter the state switches to "Installed" nearly instantly. The app is not installed afterwards. As soon as i run a Application Deployment Cycle the app is detected as not installed.
Hi,
To verify that the device is hybrid Azure AD joined, run dsregcmd /status from the command line.
The device is properly hybrid-joined if both AzureAdJoined and DomainJoined are set to YES, and verify that the SSO State section displays AzureAdPrt as YES.
Here is the detailed article we could refer to:
https://video2.skills-academy.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy
Hi,
Just checking in to see if there is any update. May we know the current status of the question? If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you.
Thanks and regards,
Amanda