Check Entra Join State With dsregcmd

See whether a device is Azure AD/Entra joined and its SSO and MDM state.

WindowsnetworksystemcloudadminpowershellLow risk

Run dsregcmd /status to print device registration, join and SSO information.

01Command

Command

$ dsregcmd /status

02What it does

dsregcmd reports join type, tenant, certificate thumbprint and the status of single sign-on and device management, which is the fastest way to diagnose sign-in and policy failures. It produces a block of text that is easy to capture in a support script.

03Risk

RiskLow risk

RequirementsWindows 10/11 with PowerShell 5.1 or PowerShell 7+

!Warning: The output includes tenant and device identifiers; redact them before sharing publicly.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

Troubleshoot devices with dsregcmd
Microsoft Learn · vendor-doc · 2026-09-20
Evidence: Documents dsregcmd /status fields for Entra join and SSO state.

Last verified: 2026-10-13 · Category: System & Settings

06Related solutions

Reset the Windows network stack with netsh

WindowsnetworksystemDiagnostics

The nuclear option for broken connectivity: rebuild Winsock and the TCP/IP stack to defaults when adapters show 'no internet' despite everything else working.

Medium risk ✓ 2026-09-17

Test a TCP port connection on Windows with Test-NetConnection

Windowsnetworktroubleshootingpowershell

A built-in PowerShell one-liner that answers 'is port 5432/3389/443 actually open through this network?' — no telnet client needed.

Low risk ✓ 2026-09-17

Set a static IP address with netsh from CMD

WindowsnetworksystemTerminal

Configure a fixed IPv4 address, subnet mask and default gateway on any adapter in one line — essential for headless servers and remote workstations.

Medium risk ✓ 2026-09-17