Questions tagged [azure-active-directory-ds]

Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Remote Desktop across internet to AzureAD machine

I am trying to connect to another computer using remote desktop. Both are physical computers connected to our work account (office 365). Both device are joined to the same AzureAD tenant. They both ...
0
votes
0answers
23 views

Azure ADDS and GSSAPI

How can I configure Azure AD Domain Services to support GSS negotiation? I see that in the on-premises AD it can be configured to "Require signature" to negotiate the authentication ...
0
votes
2answers
23 views

Adding a second physical site - 1 or 2 domains?

I'm using Windows Server Essentials 2019 to manage the domain for a small business. It's running our DNS, DHCP and AD DS and has a fairly restrictive group policy in place, with an MS SQL server ...
0
votes
0answers
16 views

New Domain: Cannot synchronize new domain way after 72 hour tenant window has closed

We have a tenant: im-one.com, which behind the scenes has changed its internal active directory. We tore down the old domain, disconnected the old domain, waited the requisite 72 hours, and still ...
0
votes
0answers
28 views

Azure Active Directory Connect - No routable domain

A customer has a on-premise .local domain with a UPN Suffix of a .nl domain. All user accounts are in the .nl domain They also use Office 365. The standard domain in Office 365 is the .nl domain. When ...
0
votes
0answers
15 views

users can't access ubuntu VMs after joining Domain

I recently joined my ubuntu VM to my Azure AD Domain Services (AD DC), I can login and all uses in the AD admin group (sudo users) can login in. However, other users can't login. I have tried the ...
0
votes
0answers
34 views

Azure Domain Services LDAPS to authenticate access to SFTP server

Trying to configure an Ubuntu file server that will use AzureAD credentials using Azure Domain Services secure ldap. The server is to be accessed either via SSH or some ftp application (think ...
0
votes
2answers
140 views

How to install Remote Desktop Services on Azure VM without requiring an Azure domain?

It appears that in order to install Remote Desktop Services on an Azure Windows 2019 Server VM, the VM must be joined to a domain. And it appears the Domain product is over $100USD per month for the ...
0
votes
1answer
247 views

Azure AD Domain Services and LDAPS on a Sonicwall SMA appliance

I want to use LDAP authentication for SSL-VPN on a SonicWall SMA\SRA unit. Endusers will then use their Azure AD username and password when connection to VPN. Have enabled LDAPS with public CA ...
1
vote
1answer
106 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
0
votes
1answer
59 views

azure ad domain services allows only one Default domain policy

We're considering moving our on-premise domain controllers to Azure, so we started testing Azure AD Domain services, we created VM in Azure, joined it to Azure Domain services, installed RSAT tools,...
0
votes
0answers
94 views

Restrict the Computers an Azure AD DS User can log onto

I have added a user to our Azure AD and it has synced with Azure AD DS. I can see the user in the Active Directory Administrative Center. This user can logon to any of our domain-joined PCs locally ...
0
votes
1answer
658 views

Rollover Kerberos Decryption Keys - Azure AD Connect

Our site has been running Azure AD Connect/Hybrid Azure for over a year now. I'm attempting to rollover the decryption keys this month and have been receiving this error: I've attempted to complete ...
0
votes
1answer
78 views

new ADDS in Azure VM, then expose to internet

I am really new with Active Directory, and I am trying out to setup an Active Directory on a Windows 2016 Azure VM, and then expose the Controller to the Internet, so I can join a PC into the ...
0
votes
1answer
226 views

Azure AD password writeback policy

This might be a silly question but when a user resets their password on azure ad, how does it make sure the password is compliant with the onpremise Group Policy which specifies number of characters ...
1
vote
2answers
327 views

Migrating application servers to new domain

I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
0
votes
0answers
50 views

Azure work account blocked when created home account with same email address

The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: tojas@something.com). This account appears as a Work/School account on Azure. This ...
0
votes
1answer
208 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
0
votes
0answers
248 views

Azure cloud only with on-premesis file server

Long time reader. First time poster! Im a sysadmin at a small company. We utilize Azure + Office 365 and use a cloud-first approach. All Windows 10 PCs are Azure AD joined (we have no local AD). We ...
1
vote
0answers
273 views

Bypass MFA for Hybrid Azure AD joined devices and Intune devices

I'm attempting to create a conditional access policy that would skip MFA for Hybrid AD joined devices or devices enrolled in Intune. I've following these 2 articles in regards to the correct settings: ...
1
vote
1answer
152 views

We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network

I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance, Network: We have two network with two different DC's. DC1 is Active Directory 2012 ...
1
vote
0answers
126 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
1
vote
1answer
270 views

Unable to join Azure Windows VM to an “Azure AD Domain Services” domain

I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get ...
1
vote
0answers
74 views

SASL passthrough via LDAPS and Azure Active Directory Domain Services?

I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in ...
2
votes
0answers
69 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
0
votes
2answers
1k views

AD DS provisioning - The prefix of the DNS domain name must contain 15 or fewer characters

I'm trying to start deploying and learning how to use AD DS in Azure so I can see if I can get rid of the requirement to have dedicated VMs running domain services. I'm struggling right at the first ...
1
vote
0answers
23 views

Combine / Allow access between 2 Azure / Office 365 Domains / Tenants

Apologies if this is not the correct place to ask this question. After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
4
votes
1answer
877 views

Azure AD migrating from cloud to on-premises

Has anyone migrated a fully developed Azure AD to on-premises DCs? I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
0
votes
2answers
531 views

Unable to Join local VM to Azure domain

I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
1
vote
2answers
280 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
1
vote
3answers
2k views

Azure AD DS with same domain name as external domain

We have the following setup: Office 365 on mycompany.com AWS Route 53 as the DNS server for mycompany.com Azure as the hosting provider I'm creating a new set of servers on Azure and I used Azure ...
0
votes
1answer
460 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
2
votes
1answer
629 views

Azure AD B2B user allow RDS login

Our situation is as follows; Company A Company B +-----------------------------+ +----------------------------+ | | ...
0
votes
1answer
1k views

azure active directory domain services unblock account

I am hoping that someone can help me unblock an account on an Azure VM. The VM is domain joined and is running SQL Server 2014 on Windows Server 2016. I have an office 365 / Azure AD tennant with ...
1
vote
1answer
303 views

Connect application server (GLPI) on-prem to Azure AD - Domain Service

Can I really have an application server (with GLPI) on-prem and use Azure AD for the LDAP connection? For the explanation, I have installed GLPI on-prem (on CentOS - Linux) to create tickets and ...
2
votes
1answer
8k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
1
vote
1answer
2k views

Is it possible to use the built-in Everyone group as a security group with AAD DS for a VM attached to a domain?

Is it possible to use the built-in O365 Everyone group as a security group with AAD DS for a VM attached to a domain? I assume it's not possible to use the built-in O365 groups as security groups, ...
0
votes
1answer
28 views

Azure Managed Domain does not allow any 'management '?

Ive recently subscribed to azure Ad domain services, created a vm and joined it to the managed domain. As i login as the owner , i find all user attributes greyed out and it doesnt allow me to move ...
1
vote
2answers
1k views

Connecting Azure VM to domain with Azure AD DS - Event ID: 4097 “The user name or password is incorrect.”

When trying to connect an Azure VM to Azure AD DS, I get the message below, even though I have logged in successfully with the username/password elsewhere, and the account used to connect to the ...
1
vote
1answer
2k views

Unable to connect as a database contained user to an Azure SQL database

On my free trial Azure account, I'm working on Exercise 5 of this official Azure lab tutorial to work on the section Connect as a database contained user to an Azure SQL database. I've successfully ...
1
vote
2answers
2k views

Cannot connect to Azure AD Domains Service LDAPS using ldapsearch

I'm having some issues trying to connect to ldapsearch to azure ad domains service. From various SO links and how-to's, we've found some commands to try, but none seem to be working. The bind/base ...
2
votes
1answer
1k views

Azure AD for Mac

we would like to use Azure AD credentials to sign in Mac machines and we are aware of that could be achieved to use Azure AD credentials to sign in local machines via Azure AD join while it is ...
3
votes
1answer
612 views

Hosting Active Directory over Azure VM to connect clients without vpn

We(a small organization) are deploying an Azure VM as Active Directory Domain Controller. Now we want to add clients to this active directory and looking at the network/connectivity solutions. Have ...
0
votes
1answer
920 views

Setup on-premise AD + same users at Exchange Online (+ Azure AD?)

I have Windows Server 2012 R2 Foundation which I want to be a DC named like office1.mycompany.org for domain mycompany.org. All users in that domain should be named like username@mycompany.org and use ...
1
vote
1answer
380 views

JWT tokens for Single Sign On on Azure AD

Is there a way to get a JWT token for federated single sign on in Azure AD instead of the currently configurable SAML2 tokens? I can see FEDERATION METADATA DOCUMENT WS-FEDERATION SIGN-ON ENDPOINT ...
0
votes
1answer
36 views

Stopping Azure Connect AD, recover mail-enabled groups

We have an active Office365 subscription, and yesterday I enabled Azure AD sync but now our Mail-enabled GROUPS are not being received by any client. I uninstalled the sync-tool on my onPremesis DC ...
1
vote
1answer
978 views

Azure AD auth with on premises servers

Is it possible to have Azure AD authentication for all users in an office, yet have them use the same credentials to access local servers? If so, how would I set that up? A little background: We are ...
1
vote
2answers
806 views

Azure AD, InTune, TeamViewer

So I had come across This Article explaining it is better to manage Windows 10 devices as mobile devices rather than using the InTune console, which I have already done. Most of our machine are ...
0
votes
1answer
76 views

How Network Security Groups affect Azure VM IPs?

I have three classic Azure VMs in a sub-net with Domain Services enabled. Machines are joined to a domain and accessible via RD. In order to apply a common set of inbound rules I created a Network ...
0
votes
1answer
200 views

RemoteAccess with Azure AD Directory Services without group policy

I am using Azure AD Domain Services and would like to be able to connect to the virtual network on Azure using RemoteAccess on a new server. However, the RemoteAccess setup requires creating some ...