Questions tagged [azure-active-directory-ds]
Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.
82
questions
0
votes
0
answers
510
views
Rdweb and Azure application proxy SSO
So for one of our customers we have moved one of their legacy application (non-web app) to azure and made it available through an RDgateway and azure application proxy. As descibed here: microsoft ...
0
votes
0
answers
51
views
On-prem Services box for otherwise Azure AD environment, after decom of legacy on-prem AD domain
Our organization is currently in the middle phase of Azure migration, using AD Connect to sync all user accounts from local AD to Azure AD with all endpoints joined directly to Azure AD. We're trying ...
- 171
0
votes
0
answers
162
views
Custom VHD with Azure Marketplace Baseline Will Not Join Azure AD Domain
My goal is to upload a customized VHD into our cloud-only USGov environment and turn it into an Azure AD-joined template. My challenge is the option Login with Azure AD is disabled.
The image is a ...
- 1
-1
votes
1
answer
1k
views
Windows Server 2022 join Azure AD Domain Services over VPN - How to do this?
I have servers spread across multiple on-premises locations that I want to join to Azure AD DS, and I don't want to setup ADFS because it is too much work.
So here is what I am thinking:
Use VPN to ...
- 469
0
votes
1
answer
939
views
How can a Azure-AD joined device log in to onpremise Active Directory (for Windows-authentication and SQL-server)
I don't understand how to handle this case:
A laptop is joined to Azure-AD and the user logs in with a PIN-code (for example). This part works fine.
Now the user needs to work with the on-premise ...
- 153
-1
votes
1
answer
205
views
How to connect .local AD DS environment to Azure Virtual Desktop
I have a client that wants to migrate from on prem to hybrid to eventually cloud only and they have a few apps that I want to run via Azure Virtual Desktop as opposed to RDS (licensing for avd is ...
0
votes
1
answer
752
views
Consequenses of changing UPN and migrating 'cloud only' to 'hybrid' users
We are going to change the domain name in our company, and by doing so, change all of the current users UPN from [email protected] to [email protected] and add the old email as an "alias".
...
0
votes
1
answer
63
views
Can I have a unique MFA for different Azure Subscriptions with one Tenant?
Currently I am looking at a configuration of a single Azure Tenant with multiple Subscriptions. Prod and non-Prod resources are separated by Subscriptions.
I am looking to understand how I could ...
- 277
1
vote
0
answers
68
views
PXE Images Losing Active Directory Trust
I'm using a PXE booting system which relies on Windows 10 VHDs to boot from in order to image across all our clients with a clean image upon every reboot. Problem is we rely on Active Directory for ...
- 111
0
votes
0
answers
297
views
Unable to access specific rest apis due to azure error
My application using spring rest and deployed in Azure server. Created rest apis using spring rest.
Am able to access all rest urls, except in one scenario.
for eg: http://mydomain123.com/api/abc , ...
- 1
-1
votes
1
answer
101
views
Is it possible for CodeTwo to choose a server-side signature based on the mail's language?
I wasn't sure if this was the correct place for this question but here goes.
I want CodeTwo (With Azure) to fetch a certain signature based on the mail's language content.
Is this possible? Or am I ...
0
votes
1
answer
707
views
LDAP bind to Azure Domain Services
I'm testing Azure AD and Azure AD DS and I have some issues to bind to Azure DS using LDAP.
I used the default AD tenant in my subscription, so i get a domain foo.onmicrosoft.com. Then I create a ADDS ...
0
votes
1
answer
79
views
Deploying Windows Server AD DS as IaaS (VM) in Azure?
I'm currently seeking some advice and guidance whether deploying additional Windows Server 2019 VM in Azure to run Active Directory Domain Controller / Global Catalog in separate AD sites called '...
- 1,295
0
votes
1
answer
66
views
How to get access to Azure VM image created in one azure account on another?
We have created a specialized VM image in Azure and shared it in shared image gallery in one of the azure accounts our organization has(ex: [email protected]). Question is, how can this image be made ...
- 13
0
votes
1
answer
294
views
Disabling the Azure AD cloud only account?
Folks,
I wonder what's the command or the steps in Azure Portal to disable not deleting Azure AD Cloud only account?
Because so far I can only delete the account and resetting the password, but not ...
- 1,295
0
votes
0
answers
1k
views
Azure Virtual Desktop - can't login
I need to set up Azure Virtual Desktop and everything is deployed but there is no possibility to log in. Created the host pool, Desktop Application Group and a workspace, then added users to the DAG ...
- 160
1
vote
1
answer
2k
views
Can an Azure AD guest user RDP to an Azure VM?
I've created an Azure VM and joined it to the Azure AD domain. I've enabled Azure AD login on the VM, and added users to the Azure AD AAD DC Administrators group, which is assigned the Administrator ...
-2
votes
1
answer
59
views
AAD Domain Services VM into AAD
I have a cloud only environment. Virtual machines are connected via AAD Domain Services. How can I register these VMs in Azure AD. I would like to mount them in Intune.
thank you Stefan
- 117
0
votes
0
answers
59
views
Can't join Azure DC VM
I have my on-premise computer which is connected to an Azure Virtual Network with a VPN Gateway.
I can ping with the private IP an Azure VM which is a Domain Controller, and even access to its file ...
- 11
0
votes
1
answer
1k
views
Manage local machines using GPO and Azure AD Domain Services
I would like to get rid of my on-prem DC but still want to apply GPO to my local computers.
I have followed the tutorial on managing GPO using Azure AD Domain Services and created a test lab using ...
- 1
0
votes
1
answer
46
views
Occasionally connected hybrid Active Directory
I'm to assist someone to upgrade the hardware on a yacht. They currently have Active Directory, running on a Server 2008 machine installed on the boat.
They also have an Office365 subscription, with a ...
- 244
0
votes
3
answers
2k
views
"Password never expires" greyed out?
I have domain users in an Azure AD DS.
I need to set some of those users with passwords that don't expire.
When I go to "Active Directory Users and Computers" on a machine in the domain, the ...
- 137
0
votes
1
answer
347
views
How to make Service Principals synchronise with Active Directory Domain Services (AADDS)?
We have a number of legacy applications that use LDAP for authnz, and so after moving to AAD we needed to have an LDAP endpoint.
Azure AD Domain Services (AADDS) was installed to synchronise to LDAP, ...
- 740
1
vote
2
answers
640
views
Cannot join Google Cloud VM to Azure AD Domain Services
I have a multicloud setup using Azure VM's and Google Cloud VM's that are connected via a site-to-site VPN (from Azure).
VPN connectivity is all working fine, however I'm now trying to join all (both ...
google-cloud-platform
0
votes
1
answer
146
views
Remote workforce with Azure Active Directory Domain Services (AAD DS)
We want to completely get rid of our on-premise infrastructure.
We would like our employees to have a company laptop at home that could authenticate to the AAD DS and be managed by our IT staff ...
- 117
1
vote
1
answer
429
views
Synchronize users and passwords from LDAPS (Novell-based) to Azure Active Directory
We are a school and have a Novell/NetIQ directory service for our local computers. Multiple services (such as Moodle) are connected over Open LDAP/LDAPS (Port 636) for user authentication. We would ...
- 111
0
votes
1
answer
559
views
Remote Desktop across internet to AzureAD machine
I am trying to connect to another computer using remote desktop. Both are physical computers connected to our work account (office 365). Both device are joined to the same AzureAD tenant.
They both ...
- 133
0
votes
1
answer
299
views
Azure ADDS and GSSAPI
How can I configure Azure AD Domain Services to support GSS negotiation?
I see that in the on-premises AD it can be configured to "Require signature" to negotiate the authentication ...
- 11
0
votes
2
answers
156
views
Adding a second physical site - 1 or 2 domains?
I'm using Windows Server Essentials 2019 to manage the domain for a small business. It's running our DNS, DHCP and AD DS and has a fairly restrictive group policy in place, with an MS SQL server ...
- 145
0
votes
0
answers
39
views
New Domain: Cannot synchronize new domain way after 72 hour tenant window has closed
We have a tenant: im-one.com, which behind the scenes has changed its internal active directory. We tore down the old domain, disconnected the old domain, waited the requisite 72 hours, and still ...
0
votes
2
answers
866
views
How to install Remote Desktop Services on Azure VM without requiring an Azure domain?
It appears that in order to install Remote Desktop Services on an Azure Windows 2019 Server VM, the VM must be joined to a domain. And it appears the Domain product is over $100USD per month for the ...
- 1,013
0
votes
1
answer
929
views
Azure AD Domain Services and LDAPS on a Sonicwall SMA appliance
I want to use LDAP authentication for SSL-VPN on a SonicWall SMA\SRA unit.
Endusers will then use their Azure AD username and password when connection to VPN.
Have enabled LDAPS with public CA ...
- 1
1
vote
1
answer
493
views
Add certificate from Microsoft Azure Key Vault for LDAP/S
The only method I can seem to find to add a certificate for secure LDAP (LDAP/S) for Azure Active Directory Domain Services is to upload the certificate from my local computer. This seems like a very ...
- 70
0
votes
1
answer
155
views
azure ad domain services allows only one Default domain policy
We're considering moving our on-premise domain controllers to Azure, so we started testing Azure AD Domain services, we created VM in Azure, joined it to Azure Domain services, installed RSAT tools,...
- 115
0
votes
1
answer
1k
views
Rollover Kerberos Decryption Keys - Azure AD Connect
Our site has been running Azure AD Connect/Hybrid Azure for over a year now. I'm attempting to rollover the decryption keys this month and have been receiving this error:
I've attempted to complete ...
- 35
0
votes
1
answer
172
views
new ADDS in Azure VM, then expose to internet
I am really new with Active Directory, and I am trying out to setup an Active Directory on a Windows 2016 Azure VM, and then expose the Controller to the Internet, so I can join a PC into the ...
- 155
0
votes
1
answer
297
views
Azure AD password writeback policy
This might be a silly question but when a user resets their password on azure ad, how does it make sure the password is compliant with the onpremise Group Policy which specifies number of characters ...
- 353
1
vote
2
answers
2k
views
Migrating application servers to new domain
I work in a corporate environment which has recently been merged with another like business. There is an ongoing project to take our legacy Windows Servers and migrate them to an entirely new Windows ...
- 111
0
votes
0
answers
57
views
Azure work account blocked when created home account with same email address
The initial situation was where I had an Azure Portal account and I still have this account (name: tojas-work, email: [email protected]). This account appears as a Work/School account on Azure. This ...
- 115
0
votes
1
answer
537
views
Establishing security trust between two domains without VPN
We have a company we recently acquired and we would like for them to access our SQL Server Analysis Services (via Excel file) on our company's domain. They are external users with separate Windows ...
- 167
1
vote
0
answers
717
views
Azure cloud only with on-premesis file server
Long time reader. First time poster!
Im a sysadmin at a small company. We utilize Azure + Office 365 and use a cloud-first approach. All Windows 10 PCs are Azure AD joined (we have no local AD).
We ...
- 11
1
vote
1
answer
882
views
Bypass MFA for Hybrid Azure AD joined devices and Intune devices
I'm attempting to create a conditional access policy that would skip MFA for Hybrid AD joined devices or devices enrolled in Intune. I've following these 2 articles in regards to the correct settings:
...
- 11
1
vote
1
answer
813
views
We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network
I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance,
Network:
We have two network with two different DC's. DC1 is Active Directory 2012 ...
- 13
1
vote
0
answers
262
views
Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails
While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN=<domain name> etc.) on how to do this. Self-signed certificates were working fine ...
- 201
1
vote
1
answer
914
views
Unable to join Azure Windows VM to an “Azure AD Domain Services” domain
I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get ...
- 21
2
votes
0
answers
314
views
SASL passthrough via LDAPS and Azure Active Directory Domain Services?
I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in ...
- 3,734
2
votes
0
answers
320
views
On-Prem Linux LDAP server synced via LDAPS with O365 AAD DS (Without AAD Connect)?
If you have an on-prem Linux LDAP server, is it possible to sync your on-prem accounts with your O365 Azure Active Directory Domain Services?
We want the O365 AAD DS to be the "source of truth" and ...
- 291
0
votes
2
answers
3k
views
AD DS provisioning - The prefix of the DNS domain name must contain 15 or fewer characters
I'm trying to start deploying and learning how to use AD DS in Azure so I can see if I can get rid of the requirement to have dedicated VMs running domain services. I'm struggling right at the first ...
2
votes
0
answers
44
views
Combine / Allow access between 2 Azure / Office 365 Domains / Tenants
Apologies if this is not the correct place to ask this question.
After a recent acquisition, I am trying to understand if it is possible to provide a trust between 2 Office 365/Azure AD domains, both ...
- 21
4
votes
1
answer
1k
views
Azure AD migrating from cloud to on-premises
Has anyone migrated a fully developed Azure AD to on-premises DCs?
I work at a small tech start-up that grown. We have been using Azure AD for years with O365, security groups, enterprise apps, etc. ...
- 65