# Integrate Netwrix PPE with Azure Entra AD password policies **URL:** \ **Category:** Password Policy Enforcer Ideas\ **Tags:** not-planned\ **Created:** [April 29, 2026, 6:26pm UTC](https://community.netwrix.com/t/integrate-netwrix-ppe-with-azure-entra-ad-password-policies/129776 "2026-04-29T18:26:49Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![tgreen5555](https://avatars.discourse-cdn.com/v4/letter/t/df705f/32.png) [@tgreen5555](https://community.netwrix.com/u/tgreen5555)\ **Post date:** [April 29, 2026, 6:26pm UTC](https://community.netwrix.com/t/integrate-netwrix-ppe-with-azure-entra-ad-password-policies/129776/1 "2026-04-29T18:26:49Z")
### What is a one sentence summary of your feature request? Netwrix PPE integration with Azure/Entra AD and on-prem AD password policies! ### Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc. We have been wanting Netwrix PPE to integrate with Azure/Entra AD and on-prem AD for some time so I wanted to ask is that possible yet especially with the new 11.2 version. I know we can load the PPE client on our Intune Autopiloted machines but so far they cannot understand or read our password policy that is dictated on our on-prem AD domain. Of course any machines that are on-prem AD joined and have the client can read the password policy and are then able to assist users in changing their passwords from their machines but the Intune machines cannot. As per your technician Bryan Nelson, PPE remains unable to do what you are wanting it to do. PPE can enforce passwords for Azure/Entra accounts when Password Writeback is enabled in Azure/Entra, but it cannot display PPE Policies if not AD-Joined as the PPE Client needs a connection directly to an On-Prem DC where PPE Server DLL is loaded into LSASS in order to show PPE Policies for the user. You can post an idea for this on the Ideas page of the community here for our development team to consider for a future version of the product. ### How do you currently solve the challenges you have by not having this feature? We manage both environments separately through their native front ends, even though we own PPE we have not implemented it because it does not work the way our Netwrix salesperson sold it to us. And we have now owned it for over a year. ---
**Author:** ![jeremy.moskowitz](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/jeremy.moskowitz/32/151_2.png) [@jeremy.moskowitz](https://community.netwrix.com/u/jeremy.moskowitz)\ **Post date:** [April 29, 2026, 6:41pm UTC](https://community.netwrix.com/t/integrate-netwrix-ppe-with-azure-entra-ad-password-policies/129776/2 "2026-04-29T18:41:58Z")
Writeback is the only way to do this. There’s no magic hooks in Entra ID with APIs for us to get in the middle of and perform a similar transaction to what we do with on-prem AD. If you think there might be a way, using some method I haven’t considered, please let me know here. Thanks. -JM ---
**Author:** ![JBogalecki](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/jbogalecki/32/5445_2.png) [@JBogalecki](https://community.netwrix.com/u/JBogalecki)\ **Post date:** [October 16, 2026, 5:50pm UTC](https://community.netwrix.com/t/integrate-netwrix-ppe-with-azure-entra-ad-password-policies/129776/3 "2026-10-16T17:50:50Z")
Hi Todd, as stated earlier by Jeremy, as of today EntraID might be a tad too limiting an environment to implement the kind of password policies you can do on-prem, via Active Directory. At least that is the current state of knowledge within the team and I am not aware of a solution that would enable this when not domain-joined. If you can provide some examples, we would definitely compare and comment. Thank you in advance.