Skip to main content

Microsoft - Not Domain Joined

Summary

This role is detected on machines that are not joined to a domain.

Settings

Detection StringComparatorResultApplicable OS
See belowEqualsTrueWindows
powershell.exe -nologo -noprofile -command "$ErrorActionPreference='SilentlyContinue';$DSRegStatus = dsregcmd.exe /status;@('False','True')[($DSRegStatus -like '*AzureAdJoined : NO*') -and ($DSRegStatus -like '*EnterpriseJoined : NO*') -and ($DSRegStatus -like '*DomainJoined : NO*')]"