Not sure if this is outside the realm, asking serverfault about going server-less, but I'm not sure where to ask this. I'm a sys admin for a medium size nonprofit who wants to not only eliminate our file servers, but eliminate our domain as well.
[Editing to add the following info: We have: - Physical Server is 1 year old, with 2 years warranty left. - DC is on Server 2008 Rt, but it has DNS issues, which make me want to migrate it to a new server install rather than troubleshoot it. - 25 workstations, half Win 10, half Win 7 - As a nonprofit, we qualify for $5000 annual sponsorship in Azure ]
If we move all files out of server shares into Sharepoint Libraries, they're challenging me on the need for a domain controller. Their reasoning:
- We can use local computer accounts, or a workgroup.
- All resources are web-based; our Office 365 login is all we need.
- Users' Desktops and My Documents can be redirected to their OneDrive folders
- Windows Updates can be automated
- Maybe security can be cloud managed?
- I can't centrally monitor & manage patches, updates, security, and computers.
- I won't have Group Policy to deploy printers/software/etc.
- We won't have a network where I can see who's logged in, etc.
These arguments haven't deterred them. I feel like I’m forgetting something obvious, but I'm failing to convince them.
As I understand it, Azure Active Directory isn't meant to replace our own AD, it's more meant to extend it, connect to other services, and Azure AD DS is meant to sync with a local AD?
So do I:
- Insist that I won't run a network of non-domain-joined machines?
- Decommission the local domain, set up local accounts for all users, make them happy?
Many thanks for your thoughts!!