Forum Discussion
Connect Azure AD to AD on my virtual machine
Good day everyone. I have a question, so far i have deplyed a VM within Azure, and i also have my AD registered on Azure, but i don't know exactly how to connect or synchronize the Azure AD on po...
Hello!
So theres three different approaches you could take to connect your VM to an identity service.
1. You could connect the VM to Entra ID (formerly Azure AD), in which case you would be able to log into the VM using your azure account.
2. You could join the Azure VM to your actual Active Directory like you would a VM in your local network. Doing this method enables all the features of Active Directory such as Group Policy and assigning rights to users & groups in your local active directory
3. You could use Entra Domain Services, which is a serverless (no domain controllers) service that gives you most of the benefits of a traditional Active Directory (join services, GPOs, AD integrated DNS), and users and groups would be synced into the Entra Domain Service.
Depending on the direction you want to go, below are some links to helpful resources:
Option 1: https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows
Option 2: This option simply requires network connectivity to your local network so that your server can talk to a domain controller. To do this you need to establish a site-to-site VPN between the Azure Virtual Network and your local network: https://www.linkedin.com/posts/jeremyjwallace_connect-your-network-to-azure-in-4-easy-steps-activity-7104894065686548480--snG/?utm_source=share&utm_medium=member_desktop
Option 3: Entra Domain Services: https://learn.microsoft.com/en-us/entra/identity/domain-services/join-windows-vm
So theres three different approaches you could take to connect your VM to an identity service.
1. You could connect the VM to Entra ID (formerly Azure AD), in which case you would be able to log into the VM using your azure account.
2. You could join the Azure VM to your actual Active Directory like you would a VM in your local network. Doing this method enables all the features of Active Directory such as Group Policy and assigning rights to users & groups in your local active directory
3. You could use Entra Domain Services, which is a serverless (no domain controllers) service that gives you most of the benefits of a traditional Active Directory (join services, GPOs, AD integrated DNS), and users and groups would be synced into the Entra Domain Service.
Depending on the direction you want to go, below are some links to helpful resources:
Option 1: https://learn.microsoft.com/en-us/entra/identity/devices/howto-vm-sign-in-azure-ad-windows
Option 2: This option simply requires network connectivity to your local network so that your server can talk to a domain controller. To do this you need to establish a site-to-site VPN between the Azure Virtual Network and your local network: https://www.linkedin.com/posts/jeremyjwallace_connect-your-network-to-azure-in-4-easy-steps-activity-7104894065686548480--snG/?utm_source=share&utm_medium=member_desktop
Option 3: Entra Domain Services: https://learn.microsoft.com/en-us/entra/identity/domain-services/join-windows-vm
Hi Jeremy.
Thank you very much for your information, let me take a look on this, but i think point 2 or 3 are the best approaches for what i'm looking for, i can't give you a like, but know for sure that your answer deserves much more than that haha ;).
Thank you very much for your information, let me take a look on this, but i think point 2 or 3 are the best approaches for what i'm looking for, i can't give you a like, but know for sure that your answer deserves much more than that haha ;).
- Glad I could help!
