Questions tagged [azure-active-directory-ds]

Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.

Filter by
Sorted by
Tagged with
0 votes
0 answers
29 views

Unable to access specific rest apis due to azure error

My application using spring rest and deployed in Azure server. Created rest apis using spring rest. Am able to access all rest urls, except in one scenario. for eg: http://mydomain123.com/api/abc , ...
user avatar
  • 1
-1 votes
1 answer
30 views

Is it possible for CodeTwo to choose a server-side signature based on the mail's language?

I wasn't sure if this was the correct place for this question but here goes. I want CodeTwo (With Azure) to fetch a certain signature based on the mail's language content. Is this possible? Or am I ...
user avatar
0 votes
1 answer
195 views

LDAP bind to Azure Domain Services

I'm testing Azure AD and Azure AD DS and I have some issues to bind to Azure DS using LDAP. I used the default AD tenant in my subscription, so i get a domain foo.onmicrosoft.com. Then I create a ADDS ...
user avatar
0 votes
0 answers
51 views

How to disable toast notification "Work or school account p roblem" on hybrid AAD joined computers

How can I disable the toast notification "Work or school account problem" on hybrid AAD joined Windows 10 computers? This notification is shown every time when non AAD user logs in. We don't ...
user avatar
  • 151
0 votes
1 answer
43 views

Deploying Windows Server AD DS as IaaS (VM) in Azure?

I'm currently seeking some advice and guidance whether deploying additional Windows Server 2019 VM in Azure to run Active Directory Domain Controller / Global Catalog in separate AD sites called '...
user avatar
0 votes
1 answer
38 views

How to get access to Azure VM image created in one azure account on another?

We have created a specialized VM image in Azure and shared it in shared image gallery in one of the azure accounts our organization has(ex: userA@company.com). Question is, how can this image be made ...
user avatar
  • 13
0 votes
1 answer
67 views

Disabling the Azure AD cloud only account?

Folks, I wonder what's the command or the steps in Azure Portal to disable not deleting Azure AD Cloud only account? Because so far I can only delete the account and resetting the password, but not ...
user avatar
0 votes
0 answers
824 views

Azure Virtual Desktop - can't login

I need to set up Azure Virtual Desktop and everything is deployed but there is no possibility to log in. Created the host pool, Desktop Application Group and a workspace, then added users to the DAG ...
user avatar
  • 150
1 vote
1 answer
682 views

Can an Azure AD guest user RDP to an Azure VM?

I've created an Azure VM and joined it to the Azure AD domain. I've enabled Azure AD login on the VM, and added users to the Azure AD AAD DC Administrators group, which is assigned the Administrator ...
user avatar
-2 votes
1 answer
58 views

AAD Domain Services VM into AAD

I have a cloud only environment. Virtual machines are connected via AAD Domain Services. How can I register these VMs in Azure AD. I would like to mount them in Intune. thank you Stefan
user avatar
  • 117
0 votes
0 answers
44 views

Can't join Azure DC VM

I have my on-premise computer which is connected to an Azure Virtual Network with a VPN Gateway. I can ping with the private IP an Azure VM which is a Domain Controller, and even access to its file ...
user avatar
  • 11
0 votes
1 answer
619 views

Manage local machines using GPO and Azure AD Domain Services

I would like to get rid of my on-prem DC but still want to apply GPO to my local computers. I have followed the tutorial on managing GPO using Azure AD Domain Services and created a test lab using ...
user avatar
0 votes
1 answer
33 views

Occasionally connected hybrid Active Directory

I'm to assist someone to upgrade the hardware on a yacht. They currently have Active Directory, running on a Server 2008 machine installed on the boat. They also have an Office365 subscription, with a ...
user avatar
  • 244
0 votes
3 answers
791 views

"Password never expires" greyed out?

I have domain users in an Azure AD DS. I need to set some of those users with passwords that don't expire. When I go to "Active Directory Users and Computers" on a machine in the domain, the ...
user avatar
  • 137
0 votes
1 answer
211 views

How to make Service Principals synchronise with Active Directory Domain Services (AADDS)?

We have a number of legacy applications that use LDAP for authnz, and so after moving to AAD we needed to have an LDAP endpoint. Azure AD Domain Services (AADDS) was installed to synchronise to LDAP, ...
user avatar
1 vote
2 answers
307 views

Cannot join Google Cloud VM to Azure AD Domain Services

I have a multicloud setup using Azure VM's and Google Cloud VM's that are connected via a site-to-site VPN (from Azure). VPN connectivity is all working fine, however I'm now trying to join all (both ...
user avatar
0 votes
1 answer
102 views

Remote workforce with Azure Active Directory Domain Services (AAD DS)

We want to completely get rid of our on-premise infrastructure. We would like our employees to have a company laptop at home that could authenticate to the AAD DS and be managed by our IT staff ...
user avatar
  • 107
1 vote
1 answer
182 views

Synchronize users and passwords from LDAPS (Novell-based) to Azure Active Directory

We are a school and have a Novell/NetIQ directory service for our local computers. Multiple services (such as Moodle) are connected over Open LDAP/LDAPS (Port 636) for user authentication. We would ...
user avatar
0 votes
1 answer
379 views

Remote Desktop across internet to AzureAD machine

I am trying to connect to another computer using remote desktop. Both are physical computers connected to our work account (office 365). Both device are joined to the same AzureAD tenant. They both ...
user avatar
  • 123
0 votes
1 answer
158 views

Azure ADDS and GSSAPI

How can I configure Azure AD Domain Services to support GSS negotiation? I see that in the on-premises AD it can be configured to "Require signature" to negotiate the authentication ...
user avatar
  • 11
0 votes
2 answers
71 views

Adding a second physical site - 1 or 2 domains?

I'm using Windows Server Essentials 2019 to manage the domain for a small business. It's running our DNS, DHCP and AD DS and has a fairly restrictive group policy in place, with an MS SQL server ...
user avatar
  • 145
0 votes
0 answers
31 views

New Domain: Cannot synchronize new domain way after 72 hour tenant window has closed

We have a tenant: im-one.com, which behind the scenes has changed its internal active directory. We tore down the old domain, disconnected the old domain, waited the requisite 72 hours, and still ...
user avatar
0 votes
2 answers
684 views

How to install Remote Desktop Services on Azure VM without requiring an Azure domain?

It appears that in order to install Remote Desktop Services on an Azure Windows 2019 Server VM, the VM must be joined to a domain. And it appears the Domain product is over $100USD per month for the ...
user avatar
0 votes
1 answer
745 views

Azure AD Domain Services and LDAPS on a Sonicwall SMA appliance

I want to use LDAP authentication for SSL-VPN on a SonicWall SMA\SRA unit. Endusers will then use their Azure AD username and password when connection to VPN. Have enabled LDAPS with public CA ...
user avatar
1 vote
1 answer
344 views

Add certificate from Microsoft Azure Key Vault for LDAP/S

The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
user avatar
  • 60
0 votes
1 answer
118 views

azure ad domain services allows only one Default domain policy

We're considering moving our on-premise domain controllers to Azure, so we started testing Azure AD Domain services, we created VM in Azure, joined it to Azure Domain services, installed RSAT tools,...
user avatar
0 votes
1 answer
1k views

Rollover Kerberos Decryption Keys - Azure AD Connect

Our site has been running Azure AD Connect/Hybrid Azure for over a year now. I'm attempting to rollover the decryption keys this month and have been receiving this error: I've attempted to complete ...
user avatar
0 votes
1 answer
134 views

new ADDS in Azure VM, then expose to internet

I am really new with Active Directory, and I am trying out to setup an Active Directory on a Windows 2016 Azure VM, and then expose the Controller to the Internet, so I can join a PC into the ...
user avatar
  • 155
0 votes
1 answer
285 views

Azure AD password writeback policy

This might be a silly question but when a user resets their password on azure ad, how does it make sure the password is compliant with the onpremise Group Policy which specifies number of characters ...
user avatar
1 vote
2 answers
1k views

Migrating application servers to new domain

I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
user avatar
  • 111
0 votes
0 answers
54 views

Azure work account blocked when created home account with same email address

The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: tojas@something.com). This account appears as a Work/School account on Azure. This ...
user avatar
  • 115
0 votes
1 answer
358 views

Establishing security trust between two domains without VPN

We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
user avatar
  • 167
1 vote
0 answers
625 views

Azure cloud only with on-premesis file server

Long time reader. First time poster! Im a sysadmin at a small company. We utilize Azure + Office 365 and use a cloud-first approach. All Windows 10 PCs are Azure AD joined (we have no local AD). We ...
user avatar
1 vote
1 answer
607 views

Bypass MFA for Hybrid Azure AD joined devices and Intune devices

I'm attempting to create a conditional access policy that would skip MFA for Hybrid AD joined devices or devices enrolled in Intune. I've following these 2 articles in regards to the correct settings: ...
user avatar
1 vote
1 answer
540 views

We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network

I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance, Network: We have two network with two different DC's. DC1 is Active Directory 2012 ...
user avatar
  • 13
1 vote
0 answers
213 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
user avatar
1 vote
1 answer
648 views

Unable to join Azure Windows VM to an “Azure AD Domain Services” domain

I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get ...
user avatar
1 vote
0 answers
209 views

SASL passthrough via LDAPS and Azure Active Directory Domain Services?

I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in ...
user avatar
  • 3,434
2 votes
0 answers
231 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
user avatar
0 votes
2 answers
2k views

AD DS provisioning - The prefix of the DNS domain name must contain 15 or fewer characters

I'm trying to start deploying and learning how to use AD DS in Azure so I can see if I can get rid of the requirement to have dedicated VMs running domain services. I'm struggling right at the first ...
user avatar
2 votes
0 answers
34 views

Combine / Allow access between 2 Azure / Office 365 Domains / Tenants

Apologies if this is not the correct place to ask this question. After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
user avatar
  • 21
4 votes
1 answer
1k views

Azure AD migrating from cloud to on-premises

Has anyone migrated a fully developed Azure AD to on-premises DCs? I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
user avatar
  • 65
0 votes
2 answers
927 views

Unable to Join local VM to Azure domain

I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
user avatar
  • 1
1 vote
2 answers
702 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
user avatar
  • 91
1 vote
3 answers
5k views

Azure AD DS with same domain name as external domain

We have the following setup: Office 365 on mycompany.com AWS Route 53 as the DNS server for mycompany.com Azure as the hosting provider I'm creating a new set of servers on Azure and I used Azure ...
user avatar
0 votes
1 answer
621 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
user avatar
2 votes
1 answer
918 views

Azure AD B2B user allow RDS login

Our situation is as follows; Company A Company B +-----------------------------+ +----------------------------+ | | ...
user avatar
  • 23
0 votes
1 answer
1k views

azure active directory domain services unblock account

I am hoping that someone can help me unblock an account on an Azure VM. The VM is domain joined and is running SQL Server 2014 on Windows Server 2016. I have an office 365 / Azure AD tennant with ...
user avatar
  • 1
1 vote
1 answer
910 views

Connect application server (GLPI) on-prem to Azure AD - Domain Service

Can I really have an application server (with GLPI) on-prem and use Azure AD for the LDAP connection? For the explanation, I have installed GLPI on-prem (on CentOS - Linux) to create tickets and ...
user avatar
2 votes
1 answer
17k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
user avatar
  • 1,051