Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [azure-active-directory-ds]

Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.

1
vote
0answers
16 views

Bypass MFA for Hybrid Azure AD joined devices and Intune devices

I'm attempting to create a conditional access policy that would skip MFA for Hybrid AD joined devices or devices enrolled in Intune. I've following these 2 articles in regards to the correct settings: ...
1
vote
1answer
30 views

We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network

I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance, Network: We have two network with two different DC's. DC1 is Active Directory 2012 ...
1
vote
0answers
15 views

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
1
vote
1answer
24 views

Unable to join Azure Windows VM to an “Azure AD Domain Services” domain

I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get ...
1
vote
0answers
11 views

SASL passthrough via LDAPS and Azure Active Directory Domain Services?

I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in ...
-1
votes
0answers
6 views

unable to add azure VM to on premise domain

I am new to azure, I am currently doing a POC by extending the on-premise Active Directory to azure. The Customer wants a Virtual Machine to be the Domain Controller, they don't want to use Azure AD. ...
0
votes
0answers
14 views

Using a Windows Authentication protocol on a remote site without local domain services

The scenario is domain-A is a Windows domain with hybrid AD services, including on prem AD, ADFS and Azure AD with the possibility of adding Azure AD domain services. Domain-B has no Windows domain ...
1
vote
0answers
27 views

On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?

If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services? We want the O365 AAD DS to be the "source of truth" and ...
0
votes
2answers
70 views

AD DS provisioning - The prefix of the DNS domain name must contain 15 or fewer characters

I'm trying to start deploying and learning how to use AD DS in Azure so I can see if I can get rid of the requirement to have dedicated VMs running domain services. I'm struggling right at the first ...
1
vote
0answers
11 views

Combine / Allow access between 2 Azure / Office 365 Domains / Tenants

Apologies if this is not the correct place to ask this question. After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
3
votes
1answer
252 views

Azure AD migrating from cloud to on-premises

Has anyone migrated a fully developed Azure AD to on-premises DCs? I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
0
votes
2answers
144 views

Unable to Join local VM to Azure domain

I have a VM in Azure running Server 2016 with Active Directory Domain Controler. (Not Azure AD! But AD role setup on a VM!) and for this I use our public domain intra.test.online (I didn't share ...
1
vote
1answer
64 views

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated ...
1
vote
3answers
733 views

Azure AD DS with same domain name as external domain

We have the following setup: Office 365 on mycompany.com AWS Route 53 as the DNS server for mycompany.com Azure as the hosting provider I'm creating a new set of servers on Azure and I used Azure ...
0
votes
1answer
261 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
0
votes
0answers
98 views

Azure AD Domain Services and Microsoft 365 Business

I have a client who uses Microsoft 365 Business and now wants to install an on-prem Server to run RDS and a SQL Server based application and file shares. Would the following solution work for them? 1)...
2
votes
1answer
279 views

Azure AD B2B user allow RDS login

Our situation is as follows; Company A Company B +-----------------------------+ +----------------------------+ | | ...
0
votes
1answer
758 views

azure active directory domain services unblock account

I am hoping that someone can help me unblock an account on an Azure VM. The VM is domain joined and is running SQL Server 2014 on Windows Server 2016. I have an office 365 / Azure AD tennant with ...
1
vote
1answer
100 views

Connect application server (GLPI) on-prem to Azure AD - Domain Service

Can I really have an application server (with GLPI) on-prem and use Azure AD for the LDAP connection? For the explanation, I have installed GLPI on-prem (on CentOS - Linux) to create tickets and ...
2
votes
1answer
2k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
1
vote
1answer
555 views

Is it possible to use the built-in Everyone group as a security group with AAD DS for a VM attached to a domain?

Is it possible to use the built-in O365 Everyone group as a security group with AAD DS for a VM attached to a domain? I assume it's not possible to use the built-in O365 groups as security groups, ...
0
votes
1answer
28 views

Azure Managed Domain does not allow any 'management '?

Ive recently subscribed to azure Ad domain services, created a vm and joined it to the managed domain. As i login as the owner , i find all user attributes greyed out and it doesnt allow me to move ...
0
votes
0answers
53 views

Azure VM - Join tree domain into existing forest

I have one machine VM01 (Windows Server 2012) in Azure. Created forest xyz.com in it. It is Synchronized with Azure AD through Azure AD connect. I have created another machine VM02 (Windows Server ...
0
votes
2answers
617 views

Connecting Azure VM to domain with Azure AD DS - Event ID: 4097 “The user name or password is incorrect.”

When trying to connect an Azure VM to Azure AD DS, I get the message below, even though I have logged in successfully with the username/password elsewhere, and the account used to connect to the ...
1
vote
1answer
909 views

Unable to connect as a database contained user to an Azure SQL database

On my free trial Azure account, I'm working on Exercise 5 of this official Azure lab tutorial to work on the section Connect as a database contained user to an Azure SQL database. I've successfully ...
0
votes
2answers
747 views

Cannot connect to Azure AD Domains Service LDAPS using ldapsearch

I'm having some issues trying to connect to ldapsearch to azure ad domains service. From various SO links and how-to's, we've found some commands to try, but none seem to be working. The bind/base ...
1
vote
1answer
938 views

Azure AD for Mac

we would like to use Azure AD credentials to sign in Mac machines and we are aware of that could be achieved to use Azure AD credentials to sign in local machines via Azure AD join while it is ...
3
votes
1answer
475 views

Hosting Active Directory over Azure VM to connect clients without vpn

We(a small organization) are deploying an Azure VM as Active Directory Domain Controller. Now we want to add clients to this active directory and looking at the network/connectivity solutions. Have ...
0
votes
1answer
359 views

Setup on-premise AD + same users at Exchange Online (+ Azure AD?)

I have Windows Server 2012 R2 Foundation which I want to be a DC named like office1.mycompany.org for domain mycompany.org. All users in that domain should be named like username@mycompany.org and use ...
1
vote
1answer
230 views

JWT tokens for Single Sign On on Azure AD

Is there a way to get a JWT token for federated single sign on in Azure AD instead of the currently configurable SAML2 tokens? I can see FEDERATION METADATA DOCUMENT WS-FEDERATION SIGN-ON ENDPOINT ...
0
votes
1answer
35 views

Stopping Azure Connect AD, recover mail-enabled groups

We have an active Office365 subscription, and yesterday I enabled Azure AD sync but now our Mail-enabled GROUPS are not being received by any client. I uninstalled the sync-tool on my onPremesis DC ...
1
vote
1answer
621 views

Azure AD auth with on premises servers

Is it possible to have Azure AD authentication for all users in an office, yet have them use the same credentials to access local servers? If so, how would I set that up? A little background: We are ...
1
vote
2answers
570 views

Azure AD, InTune, TeamViewer

So I had come across This Article explaining it is better to manage Windows 10 devices as mobile devices rather than using the InTune console, which I have already done. Most of our machine are ...
0
votes
1answer
70 views

How Network Security Groups affect Azure VM IPs?

I have three classic Azure VMs in a sub-net with Domain Services enabled. Machines are joined to a domain and accessible via RD. In order to apply a common set of inbound rules I created a Network ...
0
votes
1answer
156 views

RemoteAccess with Azure AD Directory Services without group policy

I am using Azure AD Domain Services and would like to be able to connect to the virtual network on Azure using RemoteAccess on a new server. However, the RemoteAccess setup requires creating some ...
0
votes
1answer
248 views

how to provide read permission for repository in azure container service

Im new in the ACS, i configured new registry and uploaded docker image there. Also i created two tags similar to that : dir1/imagetag and dir2/imagetag. As my next use case scenario is to define ...
2
votes
2answers
2k views

Azure AD and Azure Active Directory Domain Services: Sync? Migrate?

Terminology Given the very similar terminology, let me set out the two things I am asking about... Firstly, Azure Active Directory. This is the directory service that underpins o365. You can sync ...
4
votes
2answers
911 views

Moving computer to new domain with same users

We currently have an Active Directory setup which was synced to our Azure AD. We are trying to migrate that to use Azure AD Directory Services which provide the domain controllers in the cloud. I did ...
1
vote
1answer
424 views

Azure AD Domain Services as replacement for a local Domain Controller?

We are using local on-premise domain controllers (Windows Server 2012 R2) for our small company domain (5 Users, no special requirements). As a (Windows) software company, we are able to manage ...
3
votes
1answer
145 views

Microsoft Azure AD Connect - password sync for trusted domain

Goal Enable users to login to Office 365 using their Active Directory username and password. Details AD: One local domain (2012 R2) and one trusted (2003). AD Connect: synchronises users from both ...
0
votes
1answer
24 views

User re-appears in Universal Security Group several days after being removed

Where I work we have one group whereby I've removed the user from the "members" list from one of our DC's, DC03 and then checked on the other two DC's DC01 and DC02 and can confirm that the changes ...
1
vote
0answers
51 views

Difference between Azure AD and AD DS schemas

I know that Azure AD is not AD DS, and logically, AD DS schema is different from Azure AD schema. However, appreciate if someone could explain (or provide a link to the resource that discusses the ...
0
votes
2answers
860 views

Configure Azure AD Connect

I'm trying to set up an domain in Azure AD Connect on a Workgroup computer. The challenge that we have is, we have a dedicated domain controller for the purpose of Azure AD Connect and the other ...
0
votes
1answer
75 views

Azure AD B2B all users get created in Primary Directory

I am creating an app that will live on Azure. I am attempting to use the Azure AD security to restrict access to the application. On top of that I want this to be an invitation only application, not ...
0
votes
1answer
59 views

azure active directory services - mydomain.lan will it work?

I'm looking at using azure active directory domain services to replicate our accounts upto Azure in order to be able to use our local domain accounts to authenticate against services like dropbox, ...
2
votes
1answer
334 views

Azure Active Directory Domain Services on premises Domain Join

Please note this question is about Azure Active Directory Domain Services - https://azure.microsoft.com/en-gb/documentation/services/active-directory-ds/ Not the similarly named Azure Active ...