Forum Discussion
Solved
Question on Azure Active Directory Premium
Hello Team
I have a Customer that has a project on implementing Active Directory on Premises but There is a Delay on getting the hardware and now there is this idea coming Up of Implementing an AD on azure and when the Hardware server will be available Install the Onpremises Domain with Sync from Azure
Is it feasible ?
And if it is the case how do i register Machines in the Azure domain knowing that all PCs are not
- Sorry, completely missed your question in my first reply!
Yes, it’s possible, but it does also require some more tricks.
If you create the users in local AD after you have created them in Azure AD, then Azure AD Connect will join them on first sync as long as UPN, mail and proxyAddresses attributes match. That requirement is something you can achieve with a simple PowerShell script.
Regarding the computer objects it’s a bit different story. Here I would recommend implementing device writeback together with Windows Hello for Business. This requires Windows 10, and done right, combined with Intune for device management, you will have a very good, future proof and enterprise ready solution!
5 Replies
- Hi!
This is absolutely feasible!
You would first deploy new Windows Servers using the Azure IaaS offering, and then extend the virtual network to on-premises using a site-to-site VPN configuration.
Please have a look at this document
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-deploying-ws-ad-guidelines
/Anders- Sorry, completely missed your question in my first reply!
Yes, it’s possible, but it does also require some more tricks.
If you create the users in local AD after you have created them in Azure AD, then Azure AD Connect will join them on first sync as long as UPN, mail and proxyAddresses attributes match. That requirement is something you can achieve with a simple PowerShell script.
Regarding the computer objects it’s a bit different story. Here I would recommend implementing device writeback together with Windows Hello for Business. This requires Windows 10, and done right, combined with Intune for device management, you will have a very good, future proof and enterprise ready solution!- Hello Anders
Please lets make some simples things clear for me . Can you integrate a Machine which is not Windows 10 (Windows 7,8) in an Azure AD premium Domain?
