Questions tagged [azure-active-directory-ds]

Questions specifically related to Azure Active Directory Domain Services. Azure Directory DS lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Questions related to Azure Active Directory, on-premises Active Directory, AD LDS, etc should all have their own tags.

Questions specifically related to Azure Active Directory Domain Services.

Azure Active Directory Domain Services lets you join Azure virtual machines to a domain without the need to deploy domain controllers. Users sign in to these virtual machines using their corporate Active Directory credentials and access resources seamlessly. To more securely administer domain-joined virtual machines, use Group Policy—an easy, familiar way to apply and enforce security baselines on all of your Azure virtual machines.

Questions related to Azure Active Directory, on-premises Active Directory, Active Directory LDS (Lightweight Directory Services), etc should all have their own tags.

More details available at https://azure.microsoft.com/en-us/services/active-directory-ds/

77 questions
1
vote
1 answer

We have two networks, In Domain A user will be created, but the same user also able to login in Domain B network

I need clarification on DC's, I have implemented some setting but its not working. Pls clarify..Thanks in Advance, Network: We have two network with two different DC's. DC1 is Active Directory 2012 and DC2 Active Directory 2016. We are merging our…
1
vote
0 answers

Securing LDAPS service of Azure Active Directory Domain Services with Let's Encrypt certificate fails

While I was trying to import certificates into AADDS to secure the LDAPS service. I read the instructions (CN= etc.) on how to do this. Self-signed certificates were working fine but I failed to import certificates issued and signed by…
1
vote
1 answer

Unable to join Azure Windows VM to an “Azure AD Domain Services” domain

I am having difficulty joining an Azure Windows Server 2016 VM to an “Azure AD Domain Services” domain. I think the problem may be that I am not getting my credentials entered correctly when I get prompted for the name and password of an account…
1
vote
0 answers

SASL passthrough via LDAPS and Azure Active Directory Domain Services?

I have an on-prem OpenLDAP instance which is used to authenticate all of our Linux users (around 1000) and handle any Web based authentication. The user accounts and POSIX attributes are housed in LDAP while any password authentication is handed off…
1
vote
2 answers

How can I use powershell (or Graph) to access the Azure MFA properties?

I want to access (and report on) the number of users who are using Azure MFA and the means in which they do so (via the app, SMS, etc). How can I use powershell, or otherwise get the data associated with MFA usage and configuration by end users? …
1
vote
3 answers

Azure AD DS with same domain name as external domain

We have the following setup: Office 365 on mycompany.com AWS Route 53 as the DNS server for mycompany.com Azure as the hosting provider I'm creating a new set of servers on Azure and I used Azure Active Directory Domain Services so that we can log…
1
vote
1 answer

Connect application server (GLPI) on-prem to Azure AD - Domain Service

Can I really have an application server (with GLPI) on-prem and use Azure AD for the LDAP connection? For the explanation, I have installed GLPI on-prem (on CentOS - Linux) to create tickets and request for the user. I would like now open GLPI for…
1
vote
1 answer

Is it possible to use the built-in Everyone group as a security group with AAD DS for a VM attached to a domain?

Is it possible to use the built-in O365 Everyone group as a security group with AAD DS for a VM attached to a domain? I assume it's not possible to use the built-in O365 groups as security groups, but I thought I would double-check in case someone…
1
vote
2 answers

Connecting Azure VM to domain with Azure AD DS - Event ID: 4097 "The user name or password is incorrect."

When trying to connect an Azure VM to Azure AD DS, I get the message below, even though I have logged in successfully with the username/password elsewhere, and the account used to connect to the domain is a member of "AAD DC Administrators": "The…
1
vote
1 answer

Unable to connect as a database contained user to an Azure SQL database

On my free trial Azure account, I'm working on Exercise 5 of this official Azure lab tutorial to work on the section Connect as a database contained user to an Azure SQL database. I've successfully created the ADSQLUser as described in the previous…
1
vote
2 answers

Cannot connect to Azure AD Domains Service LDAPS using ldapsearch

I'm having some issues trying to connect to ldapsearch to azure ad domains service. From various SO links and how-to's, we've found some commands to try, but none seem to be working. The bind/base DNs that we're using are apparently correct…
Reverend Tim
  • 799
  • 7
  • 14
1
vote
1 answer

JWT tokens for Single Sign On on Azure AD

Is there a way to get a JWT token for federated single sign on in Azure AD instead of the currently configurable SAML2 tokens? I can see FEDERATION METADATA DOCUMENT WS-FEDERATION SIGN-ON ENDPOINT SAML-P SIGN-ON ENDPOINT SAML-P SIGN-OUT…
Sergey Shcherbakov
  • 143
  • 1
  • 2
  • 9
1
vote
1 answer

Azure AD auth with on premises servers

Is it possible to have Azure AD authentication for all users in an office, yet have them use the same credentials to access local servers? If so, how would I set that up? A little background: We are trying to move as much of our infrastructure to…
1
vote
2 answers

Azure AD, InTune, TeamViewer

So I had come across This Article explaining it is better to manage Windows 10 devices as mobile devices rather than using the InTune console, which I have already done. Most of our machine are laptops anyway. I was debating on getting TeamViewer…
1
vote
1 answer

Azure AD Domain Services as replacement for a local Domain Controller?

We are using local on-premise domain controllers (Windows Server 2012 R2) for our small company domain (5 Users, no special requirements). As a (Windows) software company, we are able to manage servers and networks but it is not our primary…