Blog Post

ITOps Talk Blog
8 MIN READ

Step-By-Step: Implementing Azure AD Password Protection On-Premises

Daniele De Angelis's avatar
Daniele De Angelis
Icon for Microsoft rankMicrosoft
May 23, 2019
I travel a lot in Italy, and many times I see multiple customers that are asking for the same requests. One request is the possibility to block some specific passwords in Active Directory. Unfortunat...
Updated Jun 07, 2019
Version 10.0
azure
Daniele De Angelis
Windows Server
Daniele De Angelis's avatar
Daniele De Angelis
Icon for Microsoft rankMicrosoft
Mar 22, 2021

Hi Marc Rodieck ,

my apologize for the delay, here you can find the answer to your question ;):
=========================================================================================
Question: Is it okay to deploy the Azure AD Password Protection Proxy service side by side with other services such as Azure AD Connect?

Answer: Yes. The Azure AD Password Protection Proxy service and Azure AD Connect should never conflict directly with each other.

 

Unfortunately, an incompatibility has been found between the version of the Microsoft Azure AD Connect Agent Updater service that is installed by the Azure AD Password Protection Proxy software and the version of the service that is installed by the Azure Active Directory Application Proxy software. This incompatibility may result in the Agent Updater service being unable to contact Azure for software updates. It is not recommended to install Azure AD Password Protection Proxy and Azure Active Directory Application Proxy on the same machine.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-faq
=========================================================================================
Be aware of the incompatibility between "Azure AD Password Protection Proxy" and "Azure Active Directory Application Proxy", in this case is better to have different servers.

Many thanks for your question.

Daniele De Angelis