# AZ-104 Azure Identity - Azure Entra ID Device Management

[Device Management](https://learn.microsoft.com/en-us/training/modules/manage-device-identity-ad-join/)

- Basics of Identity
- Registration Options


##### **<span style="background-color: rgb(0, 0, 0);">How to register devices</span>**

- Azure AD Registered: Least restrictive option, allowing for bring your own device (BYOD) with a personal Microsoft or local account, supports windows 10, IOS IpadOS, Android and macOS.
- Azure AD Joined: Device is owned by the organization and accesses Azure AD through a work account. These identities exist only in the cloud supports windows 10 and Server 2019
- Hybrid Azure AD Joined: Similar to AD joined: however, these devices identities exist both on prem and in the cloud, Support windows 7, 8.1, 10 and server 2008 or later.

Navigate to Entra ID then over to Devices

![image.png](https://wiki.tinod.net/uploads/images/gallery/2024-02/scaled-1680-/hl6VMTizm7XbdLyQ-image.png)

![image.png](https://wiki.tinod.net/uploads/images/gallery/2024-02/scaled-1680-/X1iDWj1PoAWmEdTi-image.png)

Over in Device settings we can specify which or how users can register devices on our tenant

Users may join devices to Microsoft Entra.

- All: Will allow all users to join their devices.
- Selected: specify which users can join their device.
- None: No users can join their device.

Users may register their devices with Microsoft Entra.

- Allow users to register their BYOD devices to registered devices.

Require multi-factor authentication to register or join devices with Azure ID (self explanatory)

Maximum devices per user to add, recommended is 20.

![image.png](https://wiki.tinod.net/uploads/images/gallery/2024-02/scaled-1680-/zRbMopYDMkuQFx3I-image.png)

**Device Identity**

- Simplified procedure for adding and managing devices
- Improved user experience on devices
- Single Sign-on (SSO) for any registered or joined devices.