Exam MD-102 topic 1 question 361 discussion

User A because he needs to be admin. Anyone because the default behavior in Entra id for "Users may join devices to Microsoft Entra" is "ALL users. So no role need to be granted to do so.

User A only. A workgroup (standalone) Windows 11 device can only be joined to Microsoft Entra ID (formerly Azure AD) by a local user who is a member of the Administrators group. Credentials of Admin 1 and Admin 2 Only. To join a device to Microsoft Entra ID, the user must have one of the following roles in Entra: - Global Administrator - Cloud Device Administrator - User with the Device Join or Device Registration permissions (such as Intune-enrolled use

Which local users can join Computer1 to contoso.com - User A (Administrators) Any local users with admin right can join the device to Entra ID. Two possible answers are User A (Administrator) and User C (Device Owners) Device Owner group currently isn't used in Windows though so this rule out that User C can join too. In addition, the Device Owner group only exist in Windows Server OS and the question stated this is a Window 11 OS. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#device-owners:~:text=None-,Device%20Owners,to%20the%20Windows%20Server%20OS%20in%20Default%20AD%20security%20groups.,-Expand%20table

Correct If I'm wrong: Credentials will be only Global Administrator: Cloud Device Administrator: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-device-administrator Directory Writer: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#directory-writers Local users: Only user with administrative rights (user A)

About local users, I think only an Admin can join it (UserA). Regarding the Entra credentials, not sure. It would be too much to use a GA role to join a device.