Azure AD and OnPrem Windows Server 2016
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
So you couldn't disable the external interface or you'd lose internet access. (Per tech support).
Nothing wrong with that, might be the way to go.
-
@scottalanmiller only issue that came to mind was updates.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller only issue that came to mind was updates.
Yup, of course an issue. The solution there, and this isn't that great, is that you either use WSUS for Windows or a local mirror for Linux.
-
Which means another server and more of a pain.
-
@bigbear well another issue, depending on where I store all my data. Do I launch a 3rd server with Vultr BLOB storage and share it to the terminal server, cause that would be another server without internet/updates/backup.
Or do I directly attach a volume with BLOB storage to the terminal server? Which seems odd...
-
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller only issue that came to mind was updates.
Yup, of course an issue. The solution there, and this isn't that great, is that you either use WSUS for Windows or a local mirror for Linux.
Yup, so you can maybe see where my hope was to join a 2016 RDS to Azure AD the way Windows 10 clients do (also havent tested this lol).
The cake is a lie!
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@bigbear well another issue, depending on where I store all my data. Do I launch a 3rd server with Vultr BLOB storage and share it to the terminal server, cause that would be another server without internet/updates/backup.
Or do I directly attach a volume with BLOB storage to the terminal server? Which seems odd...
Do you need the BLOB storage and why would it feel odd to have it be direct but not weird to have it on a different server? What's the benefit to having an extra server for storage?
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller only issue that came to mind was updates.
Yup, of course an issue. The solution there, and this isn't that great, is that you either use WSUS for Windows or a local mirror for Linux.
Yup, so you can maybe see where my hope was to join a 2016 RDS to Azure AD the way Windows 10 clients do (also havent tested this lol).
The cake is a lie!
Oh it's a great idea. RDS just isn't ready for that yet.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Yup, so you can maybe see where my hope was to join a 2016 RDS to Azure AD the way Windows 10 clients do (also havent tested this lol).
Windows 10 works, we use it.
-
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@bigbear well another issue, depending on where I store all my data. Do I launch a 3rd server with Vultr BLOB storage and share it to the terminal server, cause that would be another server without internet/updates/backup.
Or do I directly attach a volume with BLOB storage to the terminal server? Which seems odd...
Do you need the BLOB storage and why would it feel odd to have it be direct but not weird to have it on a different server? What's the benefit to having an extra server for storage?
I have a few TB of data so I assumed BLOB storage was the way to go. If I had less data I suppose it wouldnt be necessary. Looks like its only available from VULTR in NY/NJC data centers.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Looks like its only available from VULTR in NY/NJC data centers.
That's the good datacenter anyway
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
I have a few TB of data so I assumed BLOB storage was the way to go.
Yes, it would be then. But for RDS, unless you are making more than one RDS server, you'd still want it local (same server.)
-
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Looks like its only available from VULTR in NY/NJC data centers.
That's the good datacenter anyway
Oh yeah? Ive been deploying voice switches from several of their locations. I do notice occasionally Chicago has a lag.
-
@scottalanmiller I know you mentioned you are a "cloud first" guy. Would you go with VULTR on this type of small setup or just order in a server and run it off Hyper-V local?
-
@scottalanmiller in addition to my question above I am curious, can you deploy an Azure AD (no servers) and Windows 10 and still have the benefit of Group Policies? Reading some mixed info on that right now as well...
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller in addition to my question above I am curious, can you deploy an Azure AD (no servers) and Windows 10 and still have the benefit of Group Policies? Reading some mixed info on that right now as well...
What I have read recently, if you use the paid version of Azure AD, yes you can get some GPO options.
-
If your vultr RPS server doesn't have internet access, how will you connect to it?
Will you have a VPN into the private Vultr network that grants you access?
-
@Dashrender said in Azure AD and OnPrem Windows Server 2016:
If your vultr RPS server doesn't have internet access, how will you connect to it?
Will you have a VPN into the private Vultr network that grants you access?
Supposedly be remote desktoping into the app server, then internally to the AD server. Or via console access.As I think about this more, there is pfsenes in the ISO library. If not for a router/gateway from private networks to public, I dont know what else that would be there for. So it would seem to be possible.
-
@Dashrender said in Azure AD and OnPrem Windows Server 2016:
If your vultr RPS server doesn't have internet access, how will you connect to it?
It's the AD server that would be without Internet.
-
@scottalanmiller right but if I use ISO library to launch a pfsense instance, trying to figure out how they would stop me from setting that as my gateway on the AD server.
