Microsoft - Not Domain Joined
Summary
This role is detected on machines that are not joined to a domain.
Settings
| Detection String | Comparator | Result | Applicable OS |
|---|---|---|---|
| See below | Equals | True | Windows |
powershell.exe -nologo -noprofile -command "$ErrorActionPreference='SilentlyContinue';$DSRegStatus = dsregcmd.exe /status;@('False','True')[($DSRegStatus -like '*AzureAdJoined : NO*') -and ($DSRegStatus -like '*EnterpriseJoined : NO*') -and ($DSRegStatus -like '*DomainJoined : NO*')]"
Changelog
2025-04-10
- Initial version of the document