Forum Discussion
Plans to merge ADDS and AAD
Are there any plans to merge Active Directory Directory Services and Azure AD? This would allow there to be GPOs, OU, nesting etc ... and then we would not need an additional subscription for intune to manage server and desktop devices. This is especially true in a more remote work world. This could be combined with doing ADDS communication over QUIC. Which I proposed on the Windows Server user voice: https://windowsserver.uservoice.com/forums/304621-active-directory/suggestions/41625361-allow-adds-communication-over-quic
John Steskal Hello, I suppose you're referring to the fact that group policies configured in an on-premises AD DS environment aren't synchronized to Azure AD DS? As far as I know you need to edit one of the default GPOs or create a custom GPO in a hybrid scenario.
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
Here are my five cents John Steskal ,
Microsoft makes a clear distinction between Active Directory (a tradition X500 directory with a hierarchy, group policies, and legacy authentication protocols like Kerberos and NTLM) and Azure AD (a flat, cloud-based directory designed for high scale, supporting modern protocols like SAML, OIDC and OAuth, where you can managed devices using MDM policies).
Group Policies were not designed for the cloud and configuration as code practice, so I personally don't expect they will ever become a feature of Azure AD. Instead, you should use MDM policies for mobile devices and W10 endpoints and leverage Azure (in-guest) Policies to manage Azure-hosted VMs (that could be extended to non-Azure VMs using Azure Arc).
pazdedav The funny thing is that MDM for Windows 10 uses Group Policy. The ADMX format and structure is what the group policy engine uses to apply things. Also, there is a huge need for the classic or as us say "legacy" ou structure. You could merge Azure ADDS and Azure AD, which would allow for all protocols and give the nesting features of OUs, plus group policy. I'd love to chat more about this, and one of the most powerful things about AD is group policy, plus it is included. Which with MDM it is not.
Everyone, I've created a User voice submission on Azure ADs uservoice to add OUs and GPOs to Azure AD to support server objects and business workflows. Which is really what I am getting at here. Please upvote!
