Forum Discussion

anand_s's avatar
anand_s
Copper Contributor
Jan 10, 2019
Solved

Is it possible to use Azure AD without internet

Hello Experts

Mine is more of a business user kind of question and not from a technical question. We want to use some Access and Identity management system for our company (about 50 users and using mostly windows 10). Recently we were audited for some compliance and the auditor recommended a Active Directory services where we could control the users (active/inactive) and have info on what softwares have been installed on that machine. They also recommended we can use Azure AD. We tried with the Free version and it works when the PC/laptop is connected to internet. When its not connected, the users are not able to logon. Before investing or investigating further I want to check if it is possible to have Azure AD work without internet, ie can the users login to their machines even if it not connected to internet. Any help is appreciated. 

  • Hi Anand, By design this should work with cached credentials, so once a machine is Azure AD joined and the user on the device successfully logged on to the device, you could disable the network connection and logon again. Even without a connection to Azure AD.
  • ADFHogan's avatar
    ADFHogan
    Copper Contributor

    Related question...

    If a user has an Azure AD account, and then logs out, and into a personal Microsoft account, then out of that, and attempts to log back into their Azure AD account, does the caching still apply?

    Relative has a BYOD notebook they use for school, and had difficulties signing back into their Azure AD account, when not connected to internet.

  • Hi Anand, By design this should work with cached credentials, so once a machine is Azure AD joined and the user on the device successfully logged on to the device, you could disable the network connection and logon again. Even without a connection to Azure AD.
    • anand_s's avatar
      anand_s
      Copper Contributor

      Thanks a lot Bert for your quick reply. One more question, when we delete the user in AD Azure, the user is still able to login using the old credentials. The user is connected to internet and we believe the event of deleting the user has not synced/broadcast-ed. Any thoughts on this?

       

      Thanks

      Anand

      • Vinoth_Azure's avatar
        Vinoth_Azure
        Iron Contributor
        I am sure that you can't able login after federation service (AD-FS between Azure AD and Domain Joined Computer through internet) connectivity restored between Azure AD with domain joined computer.

        Thanks
        Vinoth K
    • anand_s's avatar
      anand_s
      Copper Contributor

      Thanks a lot Bert for your quick reply. One more question, when we delete the user in AD Azure, the user is still able to login using the old credentials. The user is connected to internet and we believe the event of deleting the user has not synced/broadcast-ed. Any thoughts on this?

       

      Thanks

      Anand

Resources