Updated: July 23, 2020 (June 25, 2018)

Understanding AAD Domain Services

Wes Miller analyzes and writes about Microsoft’s security, identity management, and systems management technologies. Before joining Directions on Microsoft, Wes... more

Azure Active Directory Domain Services can provide Windows Server Active Directory functionality as a service.
It can replace hosted or on-premises domain controllers deployed to support Azure applications and services.
Limitations prevent Azure Active Directory Domain Services from being a full replacement for traditional Active Directory.

Azure Active Directory (AAD) is a scalable, multitenant, Microsoft-hosted identity and access management service. AAD Domain Services (AAD DS), which became generally available in Oct. 2016, is an extension of AAD to enable Azure hosting of applications that require Domain Services functionality. AAD DS could support lift-and-shift migration of legacy applications to Azure, but not all applications will be compatible.

AD-Compatible Directory as a Service

In the past, organizations needing Windows Server Active Directory Domain Services (AD DS) for systems in Azure had two options:

Create a virtual private network (VPN) connection to AD DS

Atlas Members have full access

Get access to this and thousands of other unbiased analyses, roadmaps, decision kits, infographics, reference guides, and more, all included with membership. Comprehensive access to the most in-depth and unbiased expertise for Microsoft enterprise decision-making is waiting.

Membership Options

Already have an account? Login Now