Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

Question on Azure Active Directory Premium

Copper Contributor

Hello Team

 

I have a Customer that has a project on implementing Active Directory on Premises but There is a Delay on getting the hardware and now there is this idea coming Up of Implementing an AD on azure and when the Hardware server will be available Install the Onpremises Domain with Sync from Azure

 

Is it feasible ?

 

And if it is the case  how do i register Machines in the Azure domain knowing that all PCs are not 

5 Replies
Hi!

This is absolutely feasible!

You would first deploy new Windows Servers using the Azure IaaS offering, and then extend the virtual network to on-premises using a site-to-site VPN configuration.

Please have a look at this document
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-deploying-ws-ad-guidelines

/Anders
best response confirmed by Gaston NDOUMBE (Copper Contributor)
Solution
Sorry, completely missed your question in my first reply!

Yes, it’s possible, but it does also require some more tricks.

If you create the users in local AD after you have created them in Azure AD, then Azure AD Connect will join them on first sync as long as UPN, mail and proxyAddresses attributes match. That requirement is something you can achieve with a simple PowerShell script.

Regarding the computer objects it’s a bit different story. Here I would recommend implementing device writeback together with Windows Hello for Business. This requires Windows 10, and done right, combined with Intune for device management, you will have a very good, future proof and enterprise ready solution!
Hello Anders
Please lets make some simples things clear for me . Can you integrate a Machine which is not Windows 10 (Windows 7,8) in an Azure AD premium Domain?
Hi!

You can only join Windows 10 devices to Azure AD, so no Windows 7/8/8.1. That would require Active Directory Domain Services.

https://docs.microsoft.com/en-us/azure/active-directory/device-management-introduction#azure-ad-join...

If you need support for pre win 10, maybe my first response wasn’t that far off after all :)

/Anders
Hello Anders

Thx all information are valuable...
1 best response

Accepted Solutions
best response confirmed by Gaston NDOUMBE (Copper Contributor)
Solution
Sorry, completely missed your question in my first reply!

Yes, it’s possible, but it does also require some more tricks.

If you create the users in local AD after you have created them in Azure AD, then Azure AD Connect will join them on first sync as long as UPN, mail and proxyAddresses attributes match. That requirement is something you can achieve with a simple PowerShell script.

Regarding the computer objects it’s a bit different story. Here I would recommend implementing device writeback together with Windows Hello for Business. This requires Windows 10, and done right, combined with Intune for device management, you will have a very good, future proof and enterprise ready solution!

View solution in original post