I've been searching for a way to have 2 Domain Controller VM's in Azure (No DC on premise and not Azure AD).
What I did was, I created 2 VM's in Azure with a private subnet.
I made them Domain Controllers with the DNS name: ad.company.com.
I own the company.com domain name, so I created a public DNS A record entry to the public IP of the Load Balancer on Azure.
This seems to work fine when I install IIS and load balance port 80.
The default IIS website is shown when surfing to ad.company.com.
However I now try to add a computer here in the office to the Domain Controller.
I've opened up the necessary ports in the Load Balancer but it doesn't seem to work.
I also disabled the Windows Firewall and Azure Network Security Group just for testing.
I am able to resolve DNS names through the DC.
I don't find a lot of information on the internet about this setup. Does anyone have an idea?