Forum Discussion
Pest Practices - Domain Controller & GPOs
Hello everybody,
we did some tests with the WVD. Generally everything works well, but I have a question regarding the domain connection, because I'm not a Azure specialist. In our tests, we connected the local domain to Azure via Azure AD Connect and enabled the Azure Domain Services to test WVD.
Now, how can I assign WVDs AD policies to this construct, or should it be better to install a domain controller in Azure and connect it to the local AD?
What is the best practices approach?
Is this described somewhere?
Greeting Marco
6 Replies
Below some highlight on best practice:
- Hybrid Azure AD Join: This is often recommended for environments that need to maintain a strong connection between on-premises and cloud resources. It allows seamless policy management and user experience
- Azure AD Domain Services: This is suitable for environments that prefer a managed domain service without the overhead of maintaining domain controllers
- Azure Domain Controller: This is ideal for environments that require full AD DS capabilities in the cloud and have complex policy requirements
- Christian_Montoya
Microsoft
marco hartmann : Adding on to Eva's response, please note that if you use Azure AD Domain Services, at the moment we only support user connections coming from cloud users. We do not support connections from users who were initially synchronized from on-premise (through Azure AD Connect).
We are looking to support this scenario this month.
- marco hartmannCopper ContributorHi Christian,
thanks for this important note!
Is this described somewhere, what works and what not?
Greeting Marco- Christian_Montoya
Microsoft
marco hartmann : We describe this in our Overview page here: https://docs.microsoft.com/en-us/azure/virtual-desktop/overview .
However, we've also gotten feedback to add a "Supported authentication scenarios" to highlight this better, which we're looking at adding.
- evasseFormer EmployeePlease review this article first: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-identity-solutions
- marco hartmannCopper ContributorHi Eva,
I will review the article.
Thanks...