Questions tagged [azure-active-directory-ds]

Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.

Filter by
Sorted by
Tagged with
0
votes
0answers
19 views

Azure Virtual Desktop - can't login

I need to set up Azure Virtual Desktop and everything is deployed but there is no possibility to log in. Created the host pool, Desktop Application Group and a workspace, then added users to the DAG ...
0
votes
1answer
79 views

Can an Azure AD guest user RDP to an Azure VM?

I've created an Azure VM and joined it to the Azure AD domain. I've enabled Azure AD login on the VM, and added users to the Azure AD AAD DC Administrators group, which is assigned the Administrator ...
-2
votes
1answer
54 views

AAD Domain Services VM into AAD

I have a cloud only environment. Virtual machines are connected via AAD Domain Services. How can I register these VMs in Azure AD. I would like to mount them in Intune. thank you Stefan
0
votes
0answers
39 views

Can't join Azure DC VM

I have my on-premise computer which is connected to an Azure Virtual Network with a VPN Gateway. I can ping with the private IP an Azure VM which is a Domain Controller, and even access to its file ...
0
votes
1answer
59 views

Manage local machines using GPO and Azure AD Domain Services

I would like to get rid of my on-prem DC but still want to apply GPO to my local computers. I have followed the tutorial on managing GPO using Azure AD Domain Services and created a test lab using ...
0
votes
0answers
27 views

Unknown extra mandatory attributes required while adding entry to Windows AD with LDAP client

I'm trying to add a simple key-value pair to AD via LDAP protocol. I created a new schema named customStringStorage, with only one mandatory attribute title. This should be simple enough for learning. ...
0
votes
1answer
29 views

Occasionally connected hybrid Active Directory

I'm to assist someone to upgrade the hardware on a yacht. They currently have Active Directory, running on a Server 2008 machine installed on the boat. They also have an Office365 subscription, with a ...
0
votes
0answers
90 views

Azure Active Directory Domain Services (AADDS) DNS Outages

We currently make use of the Azure Active Directory Domain Services (AADDS) as the domain for our Azure hosted Virtual Machines. Every so often, we experience domain services failures, related to DNS ...
0
votes
3answers
311 views

“Password never expires” greyed out?

I have domain users in an Azure AD DS. I need to set some of those users with passwords that don't expire. When I go to "Active Directory Users and Computers" on a machine in the domain, the ...
0
votes
0answers
23 views

How to configure one Azure ADDS for all inherit Azure accounts under the same subscription?

We have a Visual Studio Enterprise Subscription – MPN subscription. Therefore, we can create several Azure accounts under the same subscription in the same tenet. So, Basically we have an one root ...
0
votes
1answer
144 views

How to make Service Principals synchronise with Active Directory Domain Services (AADDS)?

We have a number of legacy applications that use LDAP for authnz, and so after moving to AAD we needed to have an LDAP endpoint. Azure AD Domain Services (AADDS) was installed to synchronise to LDAP, ...
1
vote
2answers
212 views

Cannot join Google Cloud VM to Azure AD Domain Services

I have a multicloud setup using Azure VM's and Google Cloud VM's that are connected via a site-to-site VPN (from Azure). VPN connectivity is all working fine, however I'm now trying to join all (both ...
0
votes
1answer
39 views

Remote workforce with Azure Active Directory Domain Services (AAD DS)

We want to completely get rid of our on-premise infrastructure. We would like our employees to have a company laptop at home that could authenticate to the AAD DS and be managed by our IT staff ...
1
vote
1answer
68 views

Synchronize users and passwords from LDAPS (Novell-based) to Azure Active Directory

We are a school and have a Novell/NetIQ directory service for our local computers. Multiple services (such as Moodle) are connected over Open LDAP/LDAPS (Port 636) for user authentication. We would ...
0
votes
1answer
255 views

Remote Desktop across internet to AzureAD machine

I am trying to connect to another computer using remote desktop. Both are physical computers connected to our work account (office 365). Both device are joined to the same AzureAD tenant. They both ...
0
votes
1answer
92 views

Azure ADDS and GSSAPI

How can I configure Azure AD Domain Services to support GSS negotiation? I see that in the on-premises AD it can be configured to "Require signature" to negotiate the authentication ...
0
votes
2answers
27 views

Adding a second physical site - 1 or 2 domains?

I'm using Windows Server Essentials 2019 to manage the domain for a small business. It's running our DNS, DHCP and AD DS and has a fairly restrictive group policy in place, with an MS SQL server ...
0
votes
0answers
28 views

New Domain: Cannot synchronize new domain way after 72 hour tenant window has closed

We have a tenant: im-one.com, which behind the scenes has changed its internal active directory. We tore down the old domain, disconnected the old domain, waited the requisite 72 hours, and still ...
0
votes
2answers
420 views

How to install Remote Desktop Services on Azure VM without requiring an Azure domain?

It appears that in order to install Remote Desktop Services on an Azure Windows 2019 Server VM, the VM must be joined to a domain. And it appears the Domain product is over $100USD per month for the ...
0
votes
1answer
592 views

Azure AD Domain Services and LDAPS on a Sonicwall SMA appliance

I want to use LDAP authentication for SSL-VPN on a SonicWall SMA\SRA unit. Endusers will then use their Azure AD username and password when connection to VPN. Have enabled LDAPS with public CA ...
1
vote
1answer
215 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
0
votes
1answer
86 views

azure ad domain services allows only one Default domain policy

We're considering moving our on-premise domain controllers to Azure, so we started testing Azure AD Domain services, we created VM in Azure, joined it to Azure Domain services, installed RSAT tools,...
0
votes
1answer
971 views

Rollover Kerberos Decryption Keys - Azure AD Connect

Our site has been running Azure AD Connect/Hybrid Azure for over a year now. I'm attempting to rollover the decryption keys this month and have been receiving this error: I've attempted to complete ...
0
votes
1answer
103 views

new ADDS in Azure VM, then expose to internet

I am really new with Active Directory, and I am trying out to setup an Active Directory on a Windows 2016 Azure VM, and then expose the Controller to the Internet, so I can join a PC into the ...
0
votes
1answer
270 views

Azure AD password writeback policy

This might be a silly question but when a user resets their password on azure ad, how does it make sure the password is compliant with the onpremise Group Policy which specifies number of characters ...
1
vote
2answers
775 views

Migrating application servers to new domain

I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
0
votes
0answers
51 views

Azure work account blocked when created home account with same email address

The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: tojas@something.com). This account appears as a Work/School account on Azure. This ...
0
votes
1answer
269 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
0
votes
0answers
485 views

Azure cloud only with on-premesis file server

Long time reader. First time poster! Im a sysadmin at a small company. We utilize Azure + Office 365 and use a cloud-first approach. All Windows 10 PCs are Azure AD joined (we have no local AD). We ...
1
vote
1answer
429 views

Bypass MFA for Hybrid Azure AD joined devices and Intune devices

I'm attempting to create a conditional access policy that would skip MFA for Hybrid AD joined devices or devices enrolled in Intune. I've following these 2 articles in regards to the correct settings: ...
1
vote
1answer
359 views

We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network

I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance, Network: We have two network with two different DC's. DC1 is Active Directory 2012 ...
1
vote
0answers
165 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
1
vote
1answer
464 views

Unable to join Azure Windows VM to an “Azure AD Domain Services” domain

I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get ...
1
vote
0answers
126 views

SASL passthrough via LDAPS and Azure Active Directory Domain Services?

I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in ...
2
votes
0answers
144 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
0
votes
2answers
2k views

AD DS provisioning - The prefix of the DNS domain name must contain 15 or fewer characters

I'm trying to start deploying and learning how to use AD DS in Azure so I can see if I can get rid of the requirement to have dedicated VMs running domain services. I'm struggling right at the first ...
1
vote
0answers
26 views

Combine / Allow access between 2 Azure / Office 365 Domains / Tenants

Apologies if this is not the correct place to ask this question. After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
4
votes
1answer
1k views

Azure AD migrating from cloud to on-premises

Has anyone migrated a fully developed Azure AD to on-premises DCs? I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
0
votes
2answers
773 views

Unable to Join local VM to Azure domain

I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
1
vote
2answers
536 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
1
vote
3answers
4k views

Azure AD DS with same domain name as external domain

We have the following setup: Office 365 on mycompany.com AWS Route 53 as the DNS server for mycompany.com Azure as the hosting provider I'm creating a new set of servers on Azure and I used Azure ...
0
votes
1answer
536 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
2
votes
1answer
760 views

Azure AD B2B user allow RDS login

Our situation is as follows; Company A Company B +-----------------------------+ +----------------------------+ | | ...
0
votes
1answer
1k views

azure active directory domain services unblock account

I am hoping that someone can help me unblock an account on an Azure VM. The VM is domain joined and is running SQL Server 2014 on Windows Server 2016. I have an office 365 / Azure AD tennant with ...
1
vote
1answer
686 views

Connect application server (GLPI) on-prem to Azure AD - Domain Service

Can I really have an application server (with GLPI) on-prem and use Azure AD for the LDAP connection? For the explanation, I have installed GLPI on-prem (on CentOS - Linux) to create tickets and ...
2
votes
1answer
13k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
1
vote
1answer
2k views

Is it possible to use the built-in Everyone group as a security group with AAD DS for a VM attached to a domain?

Is it possible to use the built-in O365 Everyone group as a security group with AAD DS for a VM attached to a domain? I assume it's not possible to use the built-in O365 groups as security groups, ...
0
votes
1answer
31 views

Azure Managed Domain does not allow any 'management '?

Ive recently subscribed to azure Ad domain services, created a vm and joined it to the managed domain. As i login as the owner , i find all user attributes greyed out and it doesnt allow me to move ...
1
vote
2answers
2k views

Connecting Azure VM to domain with Azure AD DS - Event ID: 4097 “The user name or password is incorrect.”

When trying to connect an Azure VM to Azure AD DS, I get the message below, even though I have logged in successfully with the username/password elsewhere, and the account used to connect to the ...
1
vote
1answer
2k views

Unable to connect as a database contained user to an Azure SQL database

On my free trial Azure account, I'm working on Exercise 5 of this official Azure lab tutorial to work on the section Connect as a database contained user to an Azure SQL database. I've successfully ...