These are not directly accessible resources on the Azure subscription (like traditional IaaS virtual machines). A pair of managed domain controllers are created behind the scenes to support Azure AD Domain Services.These can be existing resources, or they can be created as new resources. Azure AD Domain Services require a virtual network and a resource group.VMs can be joined to the stand-alone managed domain, and group policies can be created for it.

User accounts, group memberships and credentials from the customer's on-premises directory can be synchronized to Azure AD via Azure AD Connect, and are automatically available in the managed domain, eliminating the need to manage AD replication.Įxisting groups and user accounts can be used to secure access to resources, ensuring a smoother 'lift-and-shift' of on-premises resources to Azure Infrastructure Services.Īzure AD provides a stand-alone managed domain in Azure. ← Managed MS Azure About Azure Active Directory Domain ServicesĪzure ® Active Directory ® (AD) Domain Services provide managed domain services such as domain join, group policy, Lightweight Directory Access Protocol (LDAP), and Kerberos/NT LAN Manager (NTLM) authentication that are fully compatible with Windows Server ® Active Directory.Īzure AD Domain Services allow these domain services to be consumed without the need to build, manage, and patch domain controllers as Azure Infrastructure as a Service (IaaS) virtual machines (VMs).Īzure AD Domain Services integrate with existing Azure AD tenants, allowing users to log in using their corporate credentials.

Ds active directory