How to Hybrid Join Windows 10 (and Check Its Status)

Hybrid joining a Windows 10 PC means it belongs to both your organisation’s on-premises Active Directory domain and Microsoft Entra ID (formerly Azure AD). It isn’t something you switch on from the PC: your IT team configures it on the servers, usually with Microsoft Entra Connect, and domain-joined PCs then register automatically. As a user, you can check the status with dsregcmd /status in Command Prompt and look for both joined values showing YES. Windows 10 reached end of support on October 14, 2025. Consumer Extended Security Updates (ESU) now run until October 12, 2027.

Quick Answer

IT sets up hybrid join centrally; domain-joined PCs register automatically. Check with dsregcmd /status.

Steps to Check or Trigger Registration

  1. Make sure the PC is joined to the company domain (Settings > Accounts > Access work or school shows the domain).
  2. Sign in with your work domain account while connected to the company network or VPN.
  3. Open Command Prompt and run dsregcmd /status.
  4. Check that the device state shows both domain-joined and cloud-joined as YES.
  5. If not, restart and sign in again on the company network, then contact IT if it still doesn’t register.
Windows Settings Access work or school page showing the PC connected to an organisation domain
Access work or school shows the domain connection.

Join Types Compared

Type Best for
Domain joined On-premises networks and Group Policy
Cloud joined (Entra ID) Cloud-first organisations
Hybrid joined Organisations using both
Registered (work account added) Personal devices accessing work apps

Troubleshooting

Frequently Asked Questions

Can I hybrid join a home PC?

No. It needs an organisation’s domain and cloud directory.

Why hybrid instead of cloud-only?

It lets older on-premises apps and policies keep working while adding cloud sign-in.

Does it work on Windows 11?

Yes, the process is the same.

Summary

  1. Hybrid join is set up by IT.
  2. Domain-joined PCs register automatically.
  3. Check with dsregcmd /status.
  4. Contact IT if it doesn’t show YES.