What is hybrid join and when do I want it?
Hybrid join registers an on-prem AD PC in Entra so Conditional Access and Intune can work.
Try this first
- 1Hybrid join via Entra Connect config
- 2Service Connection Point required in AD
- 3GPO to trigger automatic registration
- 4Verify on the client with dsregcmd
When to bring us in
End goal is Entra-only: Entra-join new devices and use hybrid only for legacy.
See also
- One DC or two DCs for an SMB office?Two is almost always the right answer; one DC is a single point of failure for logon, DNS and GPOs.
- Should I split FSMO roles across two DCs?For a small domain all on one DC is fine; with two DCs splitting is tidier but not required.
- How do I know my AD replication is healthy?Replication errors creep in silently; they only surface when logins or GPOs misbehave.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.