AzureAD身份验证只适用于本地(AzureAD authentication only works on local)

 改编我以前的答案之一： 
 
 有几种方法可以“激活”复制的软件，以试图停止应用程序的随意复制。 
 
 在最简单的情况下，可能通过您的网站向您购买注册码（“CD key”），并将其发送给将其输入程序或安装程序的用户。 整个过程基本上可以离线完成; 程序本身确定代码是有效的还是无效的。 
 
 这很好，很容易，但它极易受密钥共享的影响 - 因为没有“打电话回家”，那么应用程序无法知道成千上万不同的人都使用了他们从互联网或串行库或他们的朋友下载的相同密钥。 制作一些从未真正由开发人员发布的有效密钥的“密钥”也是相当容易的。 
 
 然后我们进入在线注册。 你仍然有一些代码，但程序会回到服务器，以确定代码是否有效并且通常是唯一的。 这阻止了基本的密钥共享，因为该公司知道来自世界各地的太多人都在使用相同的密钥。 也许还有一些使用MAC地址的身份识别，在同一硬件上允许无限注册，但似乎是另一台计算机的数量可能有限。 
 
 这仍然非常简单，并停止简单的密钥共享。 人们实际上将不得不破解软件或伪装服务器响应以通过它。 
 
 有时程序本身部分/大部分是加密的，只能通过在线注册步骤解密。 根据混淆程度如何，那么破解可能非常困难并且非常耗时。 生化奇兵是这方面的一个高调例子 - 首次推出全新的加密/复制保护方案，从发布到破解大约两周。 
 
 最后，特别谨慎的应用程序可能会与服务器保持不断的联系，如果连接中断，则拒绝工作。 
 
 如果您确定所有的用户都会拥有可靠的互联网连接，那么它可以被认为是保护应用程序的一种强有力的方式，但这是以隐私和一些用户对间谍软件的不信任为代价的。 
 
 在这种情况下，为了避开激活，他们需要伪装服务器本身。 蒸汽模拟器和私人WoW服务器就是一个例子。 最后，没有什么是不可破解的。 

Adaption of one of my previous answers:
 
There are a few ways to "activate" copied software to try to stop casual copying of the application.
 
In the most simplistic case, a registration code ("CD key") purchased from you, possibly via your website, and it is sent to the user who enters it into the program or installer. The whole process can basically be done offline; the program itself locally determines that the code is valid or invalid.
 
This is nice and easy, but it extremely vulnerable to key sharing - since there's no "phoning home" then the application cannot know that thousands of different people are all using the same key that they got off the internet or a serial library or their friend. It's also reasonably easy to make "keygens" which generate valid-seeming keys that were never actually issued by the developers.
 
Then we get into online registration. You still have some kind of code, but the program will phone home back to the server to determine whether the code is valid and usually unique. This stops basic key sharing, because the company knows if too many people from all over the world are all using the same key. Perhaps there is some kind of identification involved using MAC address, too, with infinite registrations allowed on the same hardware but maybe a limited number on what appears to be a different computer.
 
This is still pretty easy and stops simple key sharing. People will actually have to get into cracking the software or faking the server response to get past it.
 
Sometimes the program itself is partially/mostly encrypted and is only decrypted by the online registration step. Depending on how well this is obfuscated then it can be pretty difficult and time consuming to crack. Bioshock was a high-profile example of this - debuting with a brand new encryption/copy protection scheme that took around two weeks from release to be broken.
 
Finally, a particularly guarded application might stay in constant contact with the server, refusing to work at all if the connection is severed. 
 
If you know for sure that all your users will all have reliable internet connections then it can be considered quite a strong way to protect the app, at the cost of privacy and some user distrust of the spyware.
 
In this case to get around the activation they would need to fake the server itself. Steam emulators and private WoW servers are an example of this. And in the end, nothing is uncrackable.