Azure AD and OnPrem Windows Server 2016
-
Has anyone tried to deplot a Vultr Server 2016 VM and connect it to Azure AD (not sync, but actually join the domain) or even an OnPrem server (same difference)
It seems the only option is a VPN or to run your server on Azure. I thought I found an article on this but I keep coming back to options to sync your Local AD with Azure AD. I would prefer not to use Azure, but would like to use Azure AD.
-
Does server 2016 support win10 style Azure AD connections?
-
@Dashrender apparently yes, but online from within an Azure virtual network on an Azure VM.
Start at 9:55 and watch as they magically swipe AD off for AAD...
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
It seems the only option is a VPN or to run your server on Azure.
Something is CLEARLY wrong here. Azure AD doesn't support the use of VPNs and there is no possible way to run your own server on Azure for Azure AD. These aren't possible and don't make any sense if you know what Azure AD is. I think there is some underlying confusion here.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Has anyone tried to deplot a Vultr Server 2016 VM and connect it to Azure AD ... or even an OnPrem server (same difference)
Azure AD has no on-prem option.
-
I'm not sure if Azure AD is available for RDS yet or not.
-
Microsoft's documentation is so poor, and every product has "AD" or "Azure" in it, there is no way to search for any docs on it.
-
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
It seems the only option is a VPN or to run your server on Azure.
Something is CLEARLY wrong here. Azure AD doesn't support the use of VPNs and there is no possible way to run your own server on Azure for Azure AD. These aren't possible and don't make any sense if you know what Azure AD is. I think there is some underlying confusion here.
Azure VPN (I'm referring to site to site)
https://azure.microsoft.com/en-us/services/vpn-gateway/I don't know where you got that I want to run an "Azure AD Server". I want to avoid running a normal AD server entirely in my RDS deployment.
Azure AD can be used as a replacement for AD to join an RDS server, but apparently only if you run your RDS server on an Azure VM. You have to connect it to your Azure Virtual Network. In the video above the Microsoft RDS guy is showing this.
If I were to run a RDS server on Vultr it would be considered "onprem" from the view of Azure AD. Or if I were to run RDS server in-house I would love to avoid deploying abnormal AD server here.
-
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Has anyone tried to deplot a Vultr Server 2016 VM and connect it to Azure AD ... or even an OnPrem server (same difference)
Azure AD has no on-prem option.
I am not talking about deploying Azure AD on Orem, rather connecting a Server 2016 box to Azure AD the way that Windows 10 and other devices can be connected.
Once I saw server 2016 can join Azure AD I got excited. But it seems it's only currently possible if you run an Azure VM and connect Azure AD on your Azure Virtual Network.
Leading me to wonder if the Azure Gateway VPN could be used to connect a non-Azure network (premise or Vultr) with Azure AD using a site-to-site link.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller said in Azure AD and OnPrem Windows Server 2016:
@bigbear said in Azure AD and OnPrem Windows Server 2016:
It seems the only option is a VPN or to run your server on Azure.
Something is CLEARLY wrong here. Azure AD doesn't support the use of VPNs and there is no possible way to run your own server on Azure for Azure AD. These aren't possible and don't make any sense if you know what Azure AD is. I think there is some underlying confusion here.
Azure VPN (I'm referring to site to site)
https://azure.microsoft.com/en-us/services/vpn-gateway/I know, but Azure AD doesn't go over that.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Azure AD can be used as a replacement for AD to join an RDS server, but apparently only if you run your RDS server on an Azure VM. You have to connect it to your Azure Virtual Network. In the video above the Microsoft RDS guy is showing this.
From what I could find, this looks to only be the case if you add an AD server to the mix and have RDS talk to AD rather than to Azure AD.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
Once I saw server 2016 can join Azure AD I got excited. But it seems it's only currently possible if you run an Azure VM and connect Azure AD on your Azure Virtual Network.
I saw that too, but it looked like it was using traditional AD domains, not Azure AD.
-
That video shows Azure AD AP and Azure AD DS, not straight Azure AD. Azure AD DS is using a real AD Server that is synced to Azure AD to deliver traditional AD, but with Azure AD controlling it. So if that is what you are basing the availability off of, that's actually RDS just on traditional AD, not Azure AD.
-
He talks in the video above about elminating the need for AD servers and shows a cloud-only deployment of RDS, skip to minute 9:55
You maybe right. I'm starting to think about just ordering in a server and running an on-prem RDS. I'm about to attempt a deployment of Azure AD and an Azure VM with RDS and will report back.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
He talks in the video above about elminating the need for AD servers and shows a cloud-only deployment of RDS, skip to minute 9:55
I watched that. Like all MS videos, I think it's just marketing. Yes YOU don't need to run an AD server, MS runs it for you. That's how they "eliminate" it. But he then shows RDS talking to AD, not Azure AD, as how it works. So I'm pretty sure he just means that it's AD.
-
Or you could use a Linux AD server on Vultr. But that's still old school AD. Just cheaper. This is really a huge limitation of RDS, that's the core problem. It doesn't have Windows 10's authentication options.
-
Once again, you are correct lol. Man
I tried deploying a private network on Vultr last night, an AD vm and a RDS vm.
The AD vm ends up multihomed with an external and an internal interface. Apparently internet access is direct for each VM even when you have a private network, it just adds the private adapter. So you couldn't disable the external interface or you'd lose internet access. (Per tech support).
My last ad deployments on premise was a .local domain. Based on previous feedback here we are back to using split DNS and the actual .com?
Not sure how I would do it all on Vultr and remain secure.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
So you couldn't disable the external interface or you'd lose internet access. (Per tech support).
Nothing wrong with that, might be the way to go.
-
@scottalanmiller only issue that came to mind was updates.
-
@bigbear said in Azure AD and OnPrem Windows Server 2016:
@scottalanmiller only issue that came to mind was updates.
Yup, of course an issue. The solution there, and this isn't that great, is that you either use WSUS for Windows or a local mirror for Linux.
