Package user created during Azure Join.

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   I have a project that is using an Azure installation package created from a Windows 11 Pro workstation, which works just fine and i can join a workgroup computer to the Azure domain and the users login without any issues. However, I did notice that each time I run the wizard on a computer, I noticed that in Azure (Entra) a "package account" is created. for example: package_e32757e5-963c-4675-93bb-cdbce58d0e07@domain.com. 

Also, these accounts that are generated, are associated with the admin account that i generated the package with. (displayed in alternate email) 

It also shows that the package is listed in Settings\Accounts\Work or School area of the computer when logged in as a local admin user. (see below image)

Is this by design or did I not configure OR not configure something somwhere and this is the result of that? Why are these package accounts created? can they be deleted once the computer is joined? What have I missed? 

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
trizzetta Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 15 Aug 2023 Status: Offline Points: 10	Post Options Post Reply Quote trizzetta Report Post Thanks(0) Quote Reply Topic: Package user created during Azure Join. Posted: 14 Mar 2024 at 5:46pm
	I have a project that is using an Azure installation package created from a Windows 11 Pro workstation, which works just fine and i can join a workgroup computer to the Azure domain and the users login without any issues. However, I did notice that each time I run the wizard on a computer, I noticed that in Azure (Entra) a "package account" is created. for example: package_e32757e5-963c-4675-93bb-cdbce58d0e07@domain.com. Also, these accounts that are generated, are associated with the admin account that i generated the package with. (displayed in alternate email) It also shows that the package is listed in Settings\Accounts\Work or School area of the computer when logged in as a local admin user. (see below image) Is this by design or did I not configure OR not configure something somwhere and this is the result of that? Why are these package accounts created? can they be deleted once the computer is joined? What have I missed?

trizzetta Members Profile Send Private Message Find Members Posts Add to Buddy List Newbie Joined: 15 Aug 2023 Status: Offline Points: 10	Post Options Post Reply Quote trizzetta Report Post Thanks(0) Quote Reply Posted: 14 Mar 2024 at 5:59pm
	I also noticed that it is using the package user as the management name and it isn't setting a default user or listing the user in which it was enrolled by. (I do have auto enrolment into Intune for all Azure joined devices)

Support Members Profile Send Private Message Find Members Posts Add to Buddy List Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1941	Post Options Post Reply Quote Support Report Post Thanks(0) Quote Reply Posted: 15 Mar 2024 at 10:33am
	Hi, This is how a Provisioning Package operates, you will find more information regarding the process here - https://techcommunity.microsoft.com/t5/intune-customer-success/bulk-join-a-windows-device-to-azure-ad-and-microsoft-endpoint/ba-p/2381400 Yes, you can delete the Package_{GUID} account once the computer(s) have joined Azure, it is only used during the enrollment process. You do not need to use a Provisioning Package, you could join a computer to Azure yourself in Settings as an alternative if you only have a small number of computers to migrate? I hope this helps, Many thanks, Support.