具有自定义OU的MFA [英] MFA with custom OU‘s

问题描述

我们使用Azure AD并安装了一个Azure托管服务器2016并安装了RSAT来管理Azure AD中的自定义OU。

据我所知，Azure AD不支持自定义OU，并且不显示在自定义OU中创建的用户或组

我想使用带有条件访问或类似功能的Azure MFA的自定义OU，但无法使其工作。

我创建了一个Azure AD安全组，用过的在条件访问中为此组启用MFA但我无法将用户从自定义OU添加到此安全组（无权限）

有没有办法管理这个？

干杯斯文

解决方案

Hello  Doomhawk ， 

您能否澄清一下您是否使用Azure AD域名服务？如果是，那么您可能无法做到您正尝试进行的更改。请查看 https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide- create-ou #notes-on-administration-custom-ous  。
根据文章中的说明。 

您在自定义OU下创建的用户帐户，组，服务帐户和计算机对象在Azure AD租户中不可用
。换句话说，这些对象不会显示在Azure中AD Graph API或Azure AD UI。这些对象仅在Azure AD域服务托管域中可用。

希望信息帮助你。 

谢谢。 

Hi,

we are using Azure AD and have a Azure hosted Server 2016 with RSAT installed to manage custom OU‘s in Azure AD.
As far as I know Azure AD is not supporting custom OU‘s and it is not showing Users or Groups created in a custom OU

I would like to use custom OU's for Azure MFA with conditional access or similar but cannot get this working.
I have created a Azure AD security group which is used in conditional access to enable MFA for this group but i cannot add users from custom OU to this security group (no permissions)

Is there a way to manage this?

Cheers Sven

解决方案

Hello Doomhawk, 

Could you please clarify if you are using Azure AD domain services ? If yes then you may not be able to make the changes that you are trying to . Please check the section https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-admin-guide-create-ou#notes-on-administering-custom-ous . As per teh note in the article. 

User accounts, groups, service accounts, and computer objects that you create under custom OUs are not available in your Azure AD tenant. In other words, these objects do not show up using the Azure AD Graph API or in the Azure AD UI. These objects are only available in your Azure AD Domain Services managed domain.

Hope the information helps you . 

Thank you. 

这篇关于具有自定义OU的MFA的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！