Deploy Azure AD Domain Service and Join a Server to the Domain

In this video, I go over deploying Azure AD Domain Services and configuring replication with an on-premises Windows Active Directory domain and Azure Active Directory. I go over deployment options and how to synchronize passwords from Windows and Azure directory services. A server is deployed and joined to the Azure AD Domain Services domain and users source from Azure AD and Windows AD log in using same sign-on credentials.

Link to script:

[JoseAdolfoChancafeOblitas]

Thank you for your contributions, i ran the demo with success and i was able to understand better the way the components works. Got to be honest that i checked your video around 10 times, to understand and replicate the scenario. I'll start checking the rest of your material, pretty easy to follow.

[AshishShiwakoti]

This is my 8th time watching your video. After the 8th attempt, I have this screen for inserting username and password to connect my VM server to an azure domain. I had to change DNS server IP in the interface somewhere. I do not know. But I am here. Will learn slowly. I have to use bastion to connect to a server. RDP did not work for me. You have earned one like and one subscriber. Thank you. Keep educating.

[johnnewbegin]

Thank you. Your video really helped me out. I followed step by step and went over it again and again until I got it all right

[Moataz.Younis]

You are making everything simple and in-line.
Realy Great Job.

[Phantasia.Official]

Excellent video, thank you, so clear, and very well explained.

[Southpaw]

very informative. TY Travis . i would like to understand if there is a potential security concern enabling legacy password hash sync.

[Cryptika]

Brilliant video. This really helped me understand the process without having to waste time in my lab! Cheers

[acelove]

You have a true talent for teaching! Wonderful work! One thing I can not find an example of anywhere is a demo of a small office with a handful of desktops connecting to an Azure domain. All examples reference an on premises AD and using AD Connect to sync. Or many examples of AD domain with joining Azure VMs. Would love to see an example of this. More and more are wanting to ditch their on premises servers for Azure AD services.

[alokpratapsingh]

Very well explained. Thank you Travis, great work man !!

[Duck]

Excellent explanations all the way around - thank you!

[reelauthentictv]

GREAT VIDEO. Very informational and helped me out a ton!!!! Thanks so much Travis

[harrydiggens]

Great video. Do you still need the legacy powershell script as the new version of connect seems to have an option for this.

[cangrejoestadistico]

Great video Travis. Thanks
I have a question. What about if I only have services in Azure. Not on-prem services. Is it recommended to have Azure ADDS? I want to allow all my users to login with their Azure account to Windows, Linux servers and some services that allow LDAP.

[davidfarrell]

So is this an extension of Site AD then or is it just using the Azure AD to simulate a separate AD that servers can connect to ?

[deanvukovic]

Cloud stuff looks complicated. I started recently new job and they use all cloud and for me so far job is bene boring and not much things to do in IT Support.

[ragaikaddiss]

Thank you. This is a great resource. I have a question please. What if you are not Password Hash Sync? For instance how would it work if you have pass through authentication enabled instead? Thank you.

[kkb-x]

Travis, thanks for this great video. This does clarifies quite a lots of things. But I do have some questions.
Azure managed AD DS is a separate domain altogether. How does users authenticate to this domain? Do we need to join the machines to this AD as well (we cannot have machines joining multiple domains)? May be I am still confused on how this helps? Especially you gave an example of Lift & Shift of an IIS website. I know you did password hash synch. But if the website is now connected with this new domain, how can users have SSO capability to this IIS website, if users are on On-premises Domain? Any explanation would be appreciated.

[kennydelapiedra]

Thank you for this very informative video.

[aravinda]

Thanks Travis. I m planing to do the same soon. I need your advice for this. I need to keep my on-premise as it is and few remote offices i need users to connect to Azure directly with ADDS. My point is what about the group policy that we already using in local AD? will they work with Azure AD connected PC's and users? Right now i m using AD connect to SSO and password sync for azure from local AD.

[cusman]

What else is needed so that a new Windows 11 laptop can sign-on using Azure AD / Microsoft 365 account that now has Enterprise Azure AD service (cloud-only)? Secure LDAP setup? Anything else?