I am trying to modify our existing image task sequence in SCCM such that it will escrow bitlocker keys directly to Entra ID. I have only been able to accomplish adding it to AD and then running script post image to copy them to Entra ID. Much of the issue it timing as the task sequence joins the on-prem AD, but the system does not usually show in Entra until about 30 minutes later. I am now trying to figure out how to force the hybrid join to occur during the image task sequence, but I have not had luck there. I attempted adding a step to run dsregcmd.exe /join, but that has been causing errors. Either return code 2 or a general error is seen. Any pointers or links to blogs about this would be appreciated.
Thanks
Thanks