Forum Discussion
cloudcrazy
Apr 14, 2020Copper Contributor
Can you install AD Connect instance in Azure without internet connection?
Can you install AD Connect instance in Azure without internet connection? Is there a way to locally communicate with Azure AD in Azure? In the other public cloud provider this is possible.
Moe_Kinani
Apr 15, 2020Bronze Contributor
Hi Cloudcrazy,
Not possible with Azure.
ADConnect needs to sit on Server (physical/Azure AD DS/VM), sync the changes from OnPremise network and push it to the cloud using the internet.
Do you mind me asking why you need to sync without exposure to the internet? If security concerns, you can use Pass Through which not going to sync passwords to the cloud.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta
Hope this helps!
Moe
Not possible with Azure.
ADConnect needs to sit on Server (physical/Azure AD DS/VM), sync the changes from OnPremise network and push it to the cloud using the internet.
Do you mind me asking why you need to sync without exposure to the internet? If security concerns, you can use Pass Through which not going to sync passwords to the cloud.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta
Hope this helps!
Moe
cloudcrazy
Apr 15, 2020Copper Contributor
Moe_Kinani - the thinking of internet traffic can still be compromised and know the content of traffic are user accounts.
I was looking around and I saw documentation from o365 GCC about it and thought it can be applied to commercial setup
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-instances
- Moe_KinaniApr 17, 2020Bronze ContributorHi Cloudcrazy,
I still think Pass Through is the way to do it if you have Security concerns, as the authentication will not be stored in the cloud and authentication stays local.
Never worked in government sector and can’t speak about the document you shared.
Good luck and let us know how it goes!
Moe