Updated: July 15, 2020 (November 7, 2016)

Microsoft On-Premises Identity Infrastructure

Wes Miller analyzes and writes about Microsoft’s security, identity management, and systems management technologies. Before joining Directions on Microsoft, Wes... more

A range of on-premises products and components can provide identity-related services. Active Directory Domain Services (AD DS) remains the identity management centerpiece of Microsoft’s on-premises identity strategy, although other on-premises components increasingly interoperate with Microsoft-hosted Azure Active Directory (AAD).

Feature	Description	Motivating Driver for Organization	Requirements
AAD Connect	Software to synchronize identities (and optionally passwords) between AD DS and AAD. Replaced DirSync utility.	Centralized user provisioning and password maintenance for AD DS and AAD-based services such as Office 365. A prerequisite for single sign-on (SSO) between AD DS and AAD.	No-cost synchronization.
AD Domain Services	Windows Server directory and identity component.	Fundamental component of Microsoft’s Identity and Access Management infrastructure. Used for identity, security, DNS, DHCP, and Group Policy.	Feature of

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now