Entra ID devices and tenant overview cheat sheet
Inspect tenant context, device identities and join state without changing access.
Microsoft Entra admin center and Windows dsregcmd.
Updated · Entra ID · 7 min read
| Command / console path | What it does |
|---|---|
Entra ID → Overview | Confirm tenant identity |
Entra ID → Devices → All devices | Locate the device object |
dsregcmd /status | Inspect the local registration state |
Review Device State and SSO State sections | Compare identity and sign-in state |
Walkthrough
Use directory read access appropriate for the tenant. Run dsregcmd /status as the affected signed-in Windows user.
Step 1: Confirm tenant identity
Entra ID → Overview
Record the tenant ID and primary domain. Multiple tenants in the same browser session can lead to inspecting a similarly named but unrelated directory.
Step 2: Locate the device object
Entra ID → Devices → All devices
Search the device name and compare its device ID. Check enabled state, join type and last activity; duplicate names do not imply duplicate identities.
Step 3: Inspect the local registration state
dsregcmd /status
On the Windows device, compare AzureAdJoined, DomainJoined, TenantId and DeviceId with the portal. The command reads local registration state and does not join or leave the tenant.
Step 4: Compare identity and sign-in state
Review Device State and SSO State sections
Device join and a user’s primary refresh token are separate observations. Record AzureAdPrt in the user context; a device object existing in Entra does not prove healthy SSO.