MS-102 · Question #146
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10. You purchase a Microsoft 365 subscription. You implement password hash…
The correct answer is C. Modify the Intranet zone settings by using Group Policy. Why do you need to modify users' Intranet zone settings? By default, the browser automatically calculates the correct zone, either Internet or Intranet, from Browsers will not send Kerberos tickets to a cloud endpoint, like the Azure AD URL, unless you explicitly add the URL to…
Question
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10. You purchase a Microsoft 365 subscription. You implement password hash synchronization and Azure AD Seamless Single Sign-On (Seamless SSO). You need to ensure that users can use Seamless SSO from the Windows 10 computers. What should you do?
Options
- AJoin the computers to Azure AD.
- BCreate a conditional access policy in Azure AD.
- CModify the Intranet zone settings by using Group Policy.
- DDeploy an Azure AD Connect staging server.
How the community answered
(30 responses)- A13% (4)
- B3% (1)
- C80% (24)
- D3% (1)
Explanation
Why do you need to modify users' Intranet zone settings? By default, the browser automatically calculates the correct zone, either Internet or Intranet, from Browsers will not send Kerberos tickets to a cloud endpoint, like the Azure AD URL, unless you explicitly add the URL to the browser's Intranet zone. https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick- start#why-do-you-need-to-modify-users-intranet-zone-settings
Topics
Community Discussion
No community discussion yet for this question.