# Entra Registered Devices The goal of Microsoft Entra registered - also known as Workplace joined - devices is to provide your users with support for bring your own device (BYOD) or mobile device scenarios. In these scenarios, a user can access your organization's resources using a **personal device**.^[https://learn.microsoft.com/en-us/entra/identity/devices/concept-device-registration] Registered to Microsoft Entra ID without requiring organizational account to sign in to the device # Entra Joined Device Microsoft Entra join works even in hybrid environments, enabling access to both cloud and on-premises apps and resources^[https://learn.microsoft.com/en-us/entra/identity/devices/concept-directory-join] Joined only to Microsoft Entra ID requiring organizational account to sign in to the device # dsregcmd [This article](https://learn.microsoft.com/en-us/entra/identity/devices/troubleshoot-device-dsregcmd) covers how to use the output from the `dsregcmd` command to understand the state of devices in Microsoft Entra ID. The `dsregcmd /status` utility must be run as a domain user account. ## Device state This section lists the device join state parameters. The criteria that are required for the device to be in various join states are listed in the following table: | AzureAdJoined | EnterpriseJoined | DomainJoined | Device state | | ------------- | ---------------- | ------------ | ----------------------------- | | YES | NO | NO | Microsoft Entra joined | | NO | NO | YES | Domain Joined | | YES | NO | YES | Microsoft Entra hybrid joined | | NO | YES | YES | On-premises DRS Joined | > [!Note] > The Workplace Joined (Microsoft Entra registered) state is displayed in the "[[Microsoft Entra Managed Device State (dsregcmd)#User state|user state]]" section. - **AzureAdJoined**: Set the state to _YES_ if the device is joined to Microsoft Entra ID. Otherwise, set the state to _NO_. - **EnterpriseJoined**: Set the state to _YES_ if the device is joined to an on-premises data replication service (DRS). A device can't be both EnterpriseJoined and AzureAdJoined. - **DomainJoined**: Set the state to _YES_ if the device is joined to a domain ([[Windows Active Directory (AD)|Active Directory]]). - **DomainName**: Set the state to the name of the domain if the device is joined to a domain. ## User state This section lists the statuses of various attributes for users who are currently logged in to the device. > [!Note] > The command must run in a user context to retrieve a valid status. - **NgcSet**: Set the state to _YES_ if a Windows Hello key is set for the current logged-in user. - **NgcKeyId**: The ID of the Windows Hello key if one is set for the current logged-in user. - **CanReset**: Denotes whether the Windows Hello key can be reset by the user. - **Possible values**: DestructiveOnly, NonDestructiveOnly, DestructiveAndNonDestructive, or Unknown if error. - **WorkplaceJoined**: Set the state to _YES_ if Microsoft Entra registered accounts have been added to the device in the current NTUSER context. - **WamDefaultSet**: Set the state to _YES_ if a Web Account Manager (WAM) default WebAccount is created for the logged-in user. This field could display an error if `dsregcmd /status` is run from an elevated command prompt. - **WamDefaultAuthority**: Set the state to _organizations_ for Microsoft Entra ID. - **WamDefaultId**: Always use _[https://login.microsoft.com](https://login.microsoft.com/)_ for Microsoft Entra ID. - **WamDefaultGUID**: The WAM provider's (Microsoft Entra ID / Microsoft account) GUID for the default WAM WebAccount.