Forum Discussion
Windows Virtual Desktop - is AD Domain Controller needed and where does it reside?
- Sep 23, 2019
Hi SeizeThaNight ,
I think you are mixing the things up a bit here
.
If you have an onprem Windows AD, then you should install Azure AD Connect on the DC. In Azure, you could create a VPN in your VNET, updating the VNET DNS settings to point to the onprem DC, and then join the WVD Sessionhosts to the onprem Domain using a AD account from that AD Forest.
If you don't want to use a VPN, you could use the following setup:
On the onprem Windows AD, install Azure AD Connect on the DC to sync to Azure AD.
In Azure, add Azure AD DS, which will update the VNET for you, and then you can use that AD account from the local domain to join the WVD sessionhosts.
Hope this makes things more clear
Hi SeizeThaNight ,
You are correct, the deployment will not create a VM with Active Directory, this is a prerequisite before you start deploying (https://docs.microsoft.com/en-us/azure/virtual-desktop/overview#requirements)
As for the AD, you need a Windows Server Active Directory in sync with Azure Active Directory. This can be enabled through:
- An Azure VM in your VNET, with the Windows AD role & Azure AD Connect
- Azure AD Domain Services
So it is important, during the deployment, that you select a VNET that has either one of these options enabled in it so the SessionHosts (WVD hosts) can join that domain.
Hope this helps