https://docs.microsoft.com/azure/active-directory-domain-services/secure-your-domain