Microsoft Azure AD

I have a small network that I want to setup with all data storage to be on dropbox.
I want to have a domain structure for passwords, GPO, etc.
I do not want to have an on-premise server.
Can I sign up with Microsoft Azure and get active directory?
If so, how much is it per user?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
No. Azure AD is a different beast. With windows 10, you would get centralized authentication, but nothing like group policy at all. At a minimum, you'd need an MDM solution like Intune for that.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ie0Author Commented:
Will the MDM solution work for laptops and desktops?
What is the pricing?
Ganesamoorthy STech LeadCommented:
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Adam BrownSr Solutions ArchitectCommented:
As has been said, Azure AD can't replace on-prem DCs. You can replicate users from on-prem to cloud (and vice versa with Azure AD Premium) but devices can't authenticated to an entirely cloud-based AD. In order to be able to authenticate users against the Domain from a workstation, though, you would need an On-prem or Cloud-based VM DC. Adding a VM that is a DC to the Azure environment and syncing its AD info to Azure AD should give you most of what you need, but that DC still needs to have a VPN setup between it and your on-prem network to function.

If you're ok with only being able to manage the computers as Workgroup computers (not domain joined), then Azure AD premium would probably be a good solution for you. Intune should give you some level of management of computers, but not likely as much as Group Policy. If you're interested in doing that, I'd suggest looking at the Enterprise Mobility Suite for Azure, since it packages all the components you'd need to manage phones, laptops, and workstations from the cloud.
Cliff GaliherCommented:
"but devices can't authenticated to an entirely cloud-based AD"

Windows 10 certainly supports native Azure AD joining. It isn't a workgroup, but isnt like an on-prem domain either. It is a new sort of thing, but for new greenfield deployments, it can certainly be an option worth considering.
Cliff GaliherCommented:
Intune can certainly manage windows and mac laptops and desktops. Pricing is on their site as there are differences by region and features. I couldn't reasonably list them all here.
Adam BrownSr Solutions ArchitectCommented:
@Cliff - Being able to Join an Azure AD domain isn't the same thing as authenticating against it. MS doesn't currently provide domain authentication against Azure AD for workstations. You can join the domain, but it will function very differently, using the same methodology as the Microsoft Account login system in Windows 10. There is a lot of functionality that just doesn't work well over the Internet (Kerberos Authentication being the Big Thing).
Cliff GaliherCommented:
Apples and oranges. For someone not wanting an on-prem server, a native azure AD implementation for both users and azure AD joined machines is certainly workable and as dropbox supports SSO with AAD, this *is* a potential option for the OP, with the caveat that I initially pointed out that group policies aren't there and thus intune as a potential filler.

Don't get stuck trying to think of azure AD as an on-prem solution or technology. I know it isn't and never implied it was. But given the OPs post, it *is* possible, and may even be preferable. Microsoft made a ton of investments in Windows 10 1511/1607 and windows server 2016 to make azure AD an interesting contender for cloud -centric organizations.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.