AD DS provides many services including authentication (using Kerberos and NTLM), Directory lookup (using LDAP), Group Policy to apply settings, and much more. This is how services integrate with Active Directory, they perform LDAP Lookups. I have very fond memories of the offering as I have worked on some of the largest Active Directory deployments (100,000 seat deployments and more) in the world!ĪD DS consists of a database (NTDS.DIT) and uses something called LDAP (Lightweight Directory Access protocol). AD DS was introduced in 2000, over 20 years ago, by Microsoft as part of Windows 2000. Active Directory Domain Services (AD DS)ĪD DS is the option most people think of when thinking about Active Directory. In this scenario the session hosts are “joined” to AD DS, but are “registered” against Azure AD.
For example, if we want to use a combination of AD DS to authenticate the users and use Azure AD to “manage” the devices, we can absolutely do that by performing a “Hybrid” Domain Join. It’s also worth mentioning that you can absolutely use a combination if you want to, although you still need to pick a primary authentication mechanism. Let’s discuss these at a high-level as well as the need-to-knows and differences between them. Azure Active Directory Domain Services (Azure AD DS).Active Directory Domain Services (AD DS).There are three different types of Active Directory options are: In this next part of the series, we look into the three different types of Active Directory options (all supported within Nerdio) and call attention to some things you need to be aware of when managing identity in Azure. In Part 1 in our series on Active Directory, I discussed the history of Active Directory and where identity management in Azure is heading with Azure Active Directory.
0 kommentar(er)
