Technical Tip: How to verify Windows 11 machine is local domain joined or Entra ID joined by checking Windows registry key and assign domain joined posture tag

Description

This article describes how to verify Windows 11 machine is local domain joined or Entra ID joined by checking Windows registry key.

Scope

FortiClient, FortiClient EMS.

Solution

To check whether a Windows machine is joined to a local domain, check the following registry on that Windows machine.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

In this key, search for the following values:

Domain:

This data value shows the primary Domain Name System (DNS) domain that the computer is joined to (e.g. company.com).

To verify whether the Windows machine is Entra ID joined or hybrid Entra ID joined, search for the folder value CloudDomainJoin.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CloudDomainJoin

If this key exists on the system, it is a strong indicator that the device is either Entra ID joined or Hybrid Entra ID joined.