Forum Discussion

Brass Contributor

Apr 06, 2017

Solved

Azure AD Connect on a DC

With the documentation I've found so far I'm a bit unclear whether or not it is best practice to install Azure AD Connect on a domain controller. In this particular scenario we are looking at a singl...

Azure Active Directory (AAD)

NunoAriasSilva
Apr 07, 2017
Hi Glenn,

In my opinion, the recommended installation is always in a separate server regarding to isolate points of failure.

In past time e.g.. Dirsync it was not supported but Microsoft has expanded the support on installation on servers with other roles using Express Instalation.

If you install AD Connect on a DC or other machine with other products, it would be harder to understand a problem if occurs in your environment either the problem is on the DC role or AD Connect.

NunoAriasSilva

MVP

Apr 06, 2017

Hi Glenn,

The Express setting is by default and the custom you have the options on the below link https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-get-started-custom

Regarding the SQL, location, and others.

Yes, you can unckeck the initial sync and than change the OU's.

Glenn V

Brass Contributor

Apr 07, 2017

Thanks for the response Nuno. That was helpful. However, do you also have some thoughts regarding the question about installing Azure AD Connect on a Domain Controller?

Again, I'm not seeing anything (yet) that says this is a bad idea in an "Express" scenario like mine. Just that typically Microsoft is very good about being clear on this sort of thing.

Thanks again and let me know if you have some thoughts on the AADC on DC.