Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with a Microsoft Entra tenant named contoso.com. You need to deploy 100 Windows 11 devices to…

Active Directory domain-joined devices fully rely on on-premises infrastructure for device identity management, which contradicts the requirement to minimize this reliance.

Microsoft Entra hybrid joined devices are joined to both on-premises Active Directory and Microsoft Entra ID, enabling seamless single sign-on to both on-premises resources, such as file shares, and cloud resources. This setup fulfills the requirement for accessing on-premises shares without credential prompts, while still leveraging Microsoft Entra ID for device identity management, thereby reducing exclusive reliance on the on-premises infrastructure.

Microsoft Entra joined devices are primarily for cloud-only or cloud-first environments and would require additional configuration (like Kerberos cloud trust) to access on-premises file shares seamlessly, which is not implied as the primary solution and wouldn't be as direct for existing on-premises shares.

Microsoft Entra registered devices are typically personal devices and do not provide the necessary deep integration for seamless access to on-premises domain-joined resources like file shares without additional prompts.