• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 52
  • Last Modified:

Azure AD Connect

Hi,

I want to connect a clean windows server 2012 on a VPS to Azure AD. Do I have to create a domain first on the server 2012 before connecting? The reason is I want to install an SQL on the server 2012 in the cloud and have users logon to on-premise pc in the office and have access to all their online services.

Some help is appriciated.

Kind regards,
0
Lufaa
Asked:
Lufaa
  • 5
  • 4
2 Solutions
 
Cliff GaliherCommented:
That's the path of least resistance, yes.  Azure AD supports SAML and you could technically custom write code that ties into their APIs and get single sign-on as long as you have ADFS on-prem somewhere. But if you want to avoid coding or if you don't have ADFS, you are looking at some sort of coordination technology.
0
 
LufaaAuthor Commented:
I don't think I quite understand what you are saying but now I am as far as that I cannot connect from my server 2012 with azure ad connect to my Azure AD
azure-ad-connect.JPG
0
 
Cliff GaliherCommented:
AADConnect does exactly that. It "connects" ADDS (on-prem) to azure AD. Which means ADDS must be present a d accessible somewhere on the network (via layer 2, or VPN, or ezpressroute, or something.)

If you don't have ADDS then there is no reason to run AADConnect. You'd simply create new user accounts natively in azure AD.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LufaaAuthor Commented:
Ok, so I created a AD on the new 2012 server. I was able, after some testing and trying, to run the AADConnect but I still don't see all the Azure AD users in my server? Seems like the sync has not completed. Anything I forgot to setup or make sure is ready before doing this?
0
 
Cliff GaliherCommented:
Aadconnect syncs from server to Azure AD. Not the other way around. Your azure users will *never* suddenly appear on your server.
0
 
LufaaAuthor Commented:
Ok, clear. What is the best way when creating a new user, for example for creating a user which has access to my SQL instance on the 2012 server? Because as I understood, my Office 365 users can logon to their Windows 10 Pro computers with their Office 365 account and with the server 2012 being connected the same users have single sign on feature for accessing the SQL server on this 2012 server.
0
 
Cliff GaliherCommented:
There's a lot of planning and moving peices to get that working. If you don't want to change users' workflow m, you are looking at joining the devices to azure AD, ADFS, and UPN matching all your on-prem accounts, at the very least.

Given your kevel of familiarity with azure AD and AADConnect I'd suggest hiring a local azure developer to work with.
0
 
LufaaAuthor Commented:
Hi Cliff,

Do you know a good one I can hire?

Kind regards
0
 
Cliff GaliherCommented:
For these kinds of projects, as I said, it is often beat to hire local. Since I don't know where you are, no, I don't know anyone. Although to be fair, my answer probably will be the same even if I knew where you were.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now