Microsoft Surface Hub 2 SmCamera User Manual
Page 27

Property
What this is used for
Example
Learn more
Azure AD
tenant user
credentials
(username
and
password)
If you decide to have people in your Azure Active
Directory (Azure AD) organization become admins on
the device, then you'll need to join the Surface Hub to
Azure AD. To join it to Azure AD, you will need valid
credentials for an account in the tenant.
[email protected],
#MyPassw0rd
Non Global
Admin
accounts
For Surface Hub devices joined to Azure AD, you can
limit admin permissions to management of the
Settings app on Surface Hub. This enables you to
scope admin permissions for Surface Hub only and
prevent potentially unwanted admin access an entire
Azure AD domain.
Configure
non-Global
Admin
accounts on
Surface Hub
Property
What this is used for
Example
Domain to join
This is the domain you will need to join so that a security group of
your choice can be admins for the device. You may need the fully
qualified domain name (FQDN).
contoso (short
name) OR
contoso.corp.com
(FQDN)
Domain
account
credentials
(username and
password)
A domain can't be joined unless you provide sufficient account
credentials to join the domain. Once you provide a domain to join and
credentials to join the domain, then a security group of your choice
can change settings on the device.
admin1,
#MyPassw0rd
Admin security
group alias
This is a security group in your Active Directory (AD); any members of
this security group can change settings on the device.
SurfaceHubAdmins
Property
What this is used for
Example
Local admin account credentials
(username and password)
If you decide not to join an AD domain or Azure AD, you
can create a local admin account on the device.
admin1,
#MyPassw0rd
You can only set Device affiliation during the initial out-of-box experience (OOBE) setup. If you
need to reset Device affiliation, you’ll have to repeat OOBE setup.
If you’re joining Azure AD
If you’re joining a domain
If you're using a local admin
If you need to install certificates or apps