Azure AD Domain Services – domain controllers in the cloud?
summary
Azure AD Domain Services provides managed domain controllers in Azure as a PaaS you enable it into a VNet and it deploys two DCs in about an hour, syncs users/groups from Azure AD but only that (no OU or GPO sync, no schema changes), and exposes LDAP plus resource‑based Kerberos; it’s limited to one region only, grants management via an AAD DC Administrators group with constrained rights, charges from a 25,000 minimum objects tier (~£90/month), and is useful for lift‑and‑shift LDAP apps and Azure Files ACLs but not full on‑prem DR.
AI-written summary · about
chapters (23)
- 0:00Introduction
- 0:50About Sam
- 2:36What is Azure AD
- 5:38Azure AD Domain Services limitations
- 7:15What is Azure AD Domain Services
- 7:44Cloud only scenario
- 9:07Hybrid approach
- 10:18Azure AD instance setup
- 18:53Azure AD benefits
- 21:24Issues with Azure AD
- 22:46Top issues
- 23:16Multiregion support
- 24:52Domain admin rights
- 26:03Demo
- 30:01Custom OUs
- 31:33GPOs
- 32:16Kerberos delegation
- 33:06Additional issues
- 36:25Good use cases
- 36:35Lift and shift
- 40:10Not for you
- 42:39Azure Files
- 49:58Summary
related talks
46mUnderstanding Azure Active Directory for Data Professionals
53mAzure App Service
01h 11mConnect your servers to the Cloud using Azure Hybrid Management
48mBuilding SaaS solutions on Azure SQL Database
51mIntroduction to Azure Data Platform
01h 03mAzure Infrastructures
01h 01mSQL Server in the Cloud - The available options
01h 01mSupercharge your App Service to a Global scale