[This article](https://learn.microsoft.com/en-us/entra/identity/devices/troubleshoot-device-dsregcmd)This articlecovers how to use the output from the `dsregcmd` command to understand the state of devices in Microsoft Entra ID. The `dsregcmd /status` utility must be run as a domain user account. ## Device state This section lists the device join state parameters. The criteria that are required for the device to be in various join states are listed in the following table: Expand table |AzureAdJoined|EnterpriseJoined|DomainJoined|Device state| |---|---|---|---| |YES|NO|NO|Microsoft Entra joined| |NO|NO|YES|Domain Joined| |YES|NO|YES|Microsoft Entra hybrid joined| |NO|YES|YES|On-premises DRS Joined| > [!Note] > The Workplace Joined (Microsoft Entra registered) state is displayed in the "[[Microsoft Entra Managed Device State (dsregcmd)#User state|user state]]" section. - **AzureAdJoined**: Set the state to _YES_ if the device is joined to Microsoft Entra ID. Otherwise, set the state to _NO_. - **EnterpriseJoined**: Set the state to _YES_ if the device is joined to an on-premises data replication service (DRS). A device can't be both EnterpriseJoined and AzureAdJoined. - **DomainJoined**: Set the state to _YES_ if the device is joined to a domain ([[Windows Active Directory (AD)|Active Directory]]). - **DomainName**: Set the state to the name of the domain if the device is joined to a domain. ## User state This section lists the statuses of various attributes for users who are currently logged in to the device. > [!Note] > The command must run in a user context to retrieve a valid status. - **NgcSet**: Set the state to _YES_ if a Windows Hello key is set for the current logged-in user. - **NgcKeyId**: The ID of the Windows Hello key if one is set for the current logged-in user. - **CanReset**: Denotes whether the Windows Hello key can be reset by the user. - **Possible values**: DestructiveOnly, NonDestructiveOnly, DestructiveAndNonDestructive, or Unknown if error. - **WorkplaceJoined**: Set the state to _YES_ if Microsoft Entra registered accounts have been added to the device in the current NTUSER context. - **WamDefaultSet**: Set the state to _YES_ if a Web Account Manager (WAM) default WebAccount is created for the logged-in user. This field could display an error if `dsregcmd /status` is run from an elevated command prompt. - **WamDefaultAuthority**: Set the state to _organizations_ for Microsoft Entra ID. - **WamDefaultId**: Always use _[https://login.microsoft.com](https://login.microsoft.com/)_ for Microsoft Entra ID. - **WamDefaultGUID**: The WAM provider's (Microsoft Entra ID / Microsoft account) GUID for the default WAM WebAccount.