Here I am on my AADDS member server.
Let me show you here.
I've got Server Manager up, and the text may be small,
but the computer name is aadvm and the domain is aaddstimw.info.
This was our managed domain experience, and I've signed in with my Melissa user.
Hopefully all of what I just said makes sense, given that you're
coming from the previous lesson in which I showed you how to deploy
and configure Azure AD Domain Services.
Now, in terms of password stuff,
I just want to demonstrate here an Active Directory Administrative Center.
Notice that you can get access to your Password Settings Container and
configure fine‑grained password policies in your managed domain, so
that is supported and possible in AADDS.
And lastly,
let me open up a Run prompt and do a gpmc.msc. Now, I did install the
Active Directory management tools on this Windows Server,
but not the Group Policy console, so let's quickly handle that by
going through the Add Roles and Features Wizard. I'm just going to
buzz into the Features list, and we'll select Group Policy
Management, and we'll install that.
Alright,
that succeeded, so let's come over to the good old Run prompt and do a
gpmc.msc. You have to spell it correctly, gpmc.msc. There we are.
Now notice we can't attach a Group Policy Object at the site level because this
is a managed domain after all, although interestingly, we can inspect our Active
Directory Sites and Services console and you can see the two virtual machines
that are your managed domain controllers.
I wouldn't suggest horsing around with replication settings,
though. Notice we have our Azure Active Directory Domain Services
Computers and Users and various AADDS‑specific containers,
but the basic workflow of working with these Group Policy
Objects is very similar indeed to how we do so in an on‑premises local AD DS environment.