Now let's pick up where we left off in the previous lesson on Azure AD
Domain Services. Recall in the previous lesson I introduced the main use
cases for Azure AD Domain Services, and those are, number one, for legacy
app migration into Azure where you've got VM‑based applications that
require connectivity to Lightweight Directory Access Protocol, or LDAP, in
Active Directory; you've got Kerberos and NTLM authentication happening;
you want to continue to use group policy for your configuration management.
The other main use case is that you can create an Azure AD Domain
Services managed domain and set up a one‑way trust from the cloud,
from your virtual network, to your local Active Directory to
facilitate resource sharing.
Now, in our example, we're doing Azure AD Domain Services,
not in a cloud‑first way, but in a hybrid cloud way.
So we're going to have Azure AD Connect synchronizing selected identities from
Windows Server Active Directory locally into our Azure AD tenant. And we've
created in the previous module our managed domain.
It's now time to configure that managed domain and actually
start to work with it. Here, the AAD DC Administrators Azure AD
group is going to be where you stage your delegated
administrators for your managed domain.
So that's an important Azure AD group that you should be aware of.
That's your main source of delegated domain admin‑ship,
for lack of a better term, into your managed domain.
And then from the client side, and when I say client,
I'm not necessarily talking about desktop operating systems,
your Windows Server VMs in that virtual network,
the domain join and management into the managed domain is
quite similar, all things considered, to what you see on‑prem, and I'll light that up in the demo.