Azure Active Directory

[BillyCarpenter]

What are the pros/cons vs. the real thing? And the cost?

[slimslob]

From what I can find with a quick search is that it is Active Directory Services but not for company LAN/WAN. It is for Cloud based authentication. It is now a part of Microsoft Entra, Secure access for a connected world.

[BillyCarpenter]

From what I can find with a quick search is that it is Active Directory Services but not for company LAN/WAN. It is for Cloud based authentication. It is now a part of Microsoft Entra, Secure access for a connected world.

I think you're right. My idiot customer thinks he can go all cloud based to replace his local server.

[Hansoon]

I think you're right. My idiot customer thinks he can go all cloud based to replace his local server.

Exactly like my “idiot customer” I warned him, but whining and moaning was great when his Internet went down for half a day. They could not do anything anymore in their office.

Hans

[ThisPete]

Exactly like my “idiot customer” I warned him, but whining and moaning was great when his Internet went down for half a day. They could not do anything anymore in their office.

Hans

4G backup is essential.. but still doesn't help you if the 'service' goes down...

[Hart]

Huh ? I'm pretty sure that I have multiple customer with Microsoft Entra and that's exactly what you can expect from an Active Directory in the "cloud".
And there is an hybrid approach with an on-prem server to speed up things and act as a failover in case of internet outage.
But according to my customer, it's a mess and Microsoft is constantly changing the names of services, so it's hard to keep track.

[BillyCarpenter]

I'm still unclear on what Azure can and can't do.

Can it act as a domain server?
Or a DHCP server?

I understand it can function as a file server but I already have my customer set up on SharePoint for most file sharing Only financial records are kept on the local server.

[BillyCarpenter]

I found my answer. This is getting interesting. Perhaps I need to learn it.




AI Overview
Yes, Azure can be used as a domain server. You can host a domain controller in Azure using virtual machines (VMs) running Windows Server, or you can utilize Microsoft Entra Domain Services, a managed service offering a domain controller experience without the need for individual VM management.
Here's a breakdown:
1. Hosting a Domain Controller on Azure VMs:

• You can create Windows Server VMs in Azure and configure them as domain controllers, extending your existing on-premises Active Directory or creating a new one in Azure.
• This involves setting up the VMs with appropriate network configurations, installing Active Directory Domain Services (AD DS), and configuring them as domain controllers.
• You'll need to manage and maintain these VMs, including patching, updates, and backups.

2. Microsoft Entra Domain Services (Azure AD DS):

• Azure AD DS is a managed service that provides a domain controller experience without the need to manage individual VMs.
• It offers features like domain join, group policy, LDAP, and Kerberos/NTLM authentication.
• You can integrate Azure AD DS with your existing Azure AD tenant, allowing users to log in with their existing credentials.
• It simplifies the process of using domain services in Azure, as Microsoft handles the underlying infrastructure and maintenance.

In essence, you have two primary options:

• IaaS (Infrastructure as a Service) approach:
  .
  Create and manage your own domain controllers as VMs in Azure (similar to an on-premises setup).
• PaaS (Platform as a Service) approach:
  .
  Use the managed Microsoft Entra Domain Services for a simplified and scalable domain controller experience.

The choice depends on your specific needs and infrastructure requirements. If you prefer a hands-on approach and have specific customization needs, the IaaS option might be suitable. If you want a managed service and simplified administration, Azure AD DS is a good choice, according to Microsoft.

• Microsoft Entra Domain Services (Azure AD DS)
  Microsoft Entra Domain Services (formerly Azure Active Directory Domain Services), part of Microsoft Entra, enables you to use man...
  Microsoft Azure
• On-prem Domain Controller or Azure Domain Controller?
  May 26, 2020
  
  Spiceworks Community
• Deploying Domain Controller in Azure | Best Practices
  Apr 16, 2023 — Domain controllers are fundamental to any Windows-based networking infrastructure, providing centralized authenticatio...
  
  Terminalworks

[BillyCarpenter]

I'm still confused about this platform. Now I read where you still need a dedicated server for anything behind the firewall. It's very confusing or I'm dumb. Could be both,

[slimslob]

I'm still confused about this platform. Now I read where you still need a dedicated server for anything behind the firewall. It's very confusing or I'm dumb. Could be both,

Read Hansoon's comment.

[BillyCarpenter]

Read Hansoon's comment.

I did but that didn't really answer my question. I understand the internet is needed but needed for what exactly? I don't know if all of these cloud services can replace a physical server.

[slimslob]

I did but that didn't really answer my question. I understand the internet is needed but needed for what exactly? I don't know if all of these cloud services can replace a physical server.

No, but with a local Active Directory server you at least have access to those documents and software installed there, like your according system. For individual users that need to access the cloud, they might be able to use their cell phone data connection.. When my internet is down I can use either a Bluetooth or USB tethering in order to stay connected. Probably what many companies have their mobile employees do to access their cloud services.