Don't Use Entra Domain Services to Replace Windows Active Directory

Рет қаралды 3,509

2 ай бұрын

Correction: Entra DS now supports a two-way trust.
Entra Domain Services (Entra DS) is a Windows AD-compatible service managed by Microsoft. Some may see it as a better alternative to self-hosting Windows AD. However, there are limitations to Entra DS that should be considered before using it to replace domain controllers. This video and accompanying blog post go over those limitations and outline how they could impact an organization.
Links
Free Azure guide! Subscribe to the newsletter
subscribepage.io/rbsIjt
Zero to Hero with Azure Virtual Desktop
www.udemy.com/course/zero-to-hero-with-windows-virtual-desktop/?referralCode=B2FE49E6FCEE7A7EA8D4
Hybrid Identity with Windows AD and Azure AD
www.udemy.com/course/hybrid-identity-and-azure-active-directory/?referralCode=7F62C4C6FD05C73ACCC3
Windows 365 Enterprise and Intune Management
www.udemy.com/course/windows-365-enterprise-and-intune-management/?referralCode=4A1ED105341D0AA20D2E
Entra ID, Windows AD and Entra DS video
kzfaq.info/get/bejne/nc1pnZOhramloYk.html

Пікірлер: 17

@SmallvilleJW Ай бұрын

Awesome overview, Travis! Thank you so much for providing excellent Azure content. 😎

@mysticsilent 2 ай бұрын

Thanks for this nice guide!

@Wilhelmcook Ай бұрын

Thanks for this explanation. Very Helpful.

@77zishan Ай бұрын

Thanks again for this video! Love it

@patrick__007 Ай бұрын

Great and clear to me!

@curranp3892 Ай бұрын

Hi Travis love your stuff didnt realize famous you are !

@alexmags Ай бұрын

Limitation: Lack of cloud Kerberos trust, in Entra Domain Services, blocks sign in to domain joined' resources in Entra DS from Entra Joined desktops. Would you loose directory event logs in Defender for Identity (which is amazing) if you can't install it's agent/Defender for Endpoint?

@curranp3892 Ай бұрын

This guy i swear i recognize his voice he has courses on cloud academy he is a celebrity

@shahabpouladiankari4958 Ай бұрын

What if we had done it and got stuck in all those limitations? I have three tenants like this. And i am looking for a solution to move to windows AD or a hybrid with least down time.

@JonathanIsrael708 Ай бұрын

I'm confused by your Intune Enrollment limitation point. Wouldn't devices be Entra joined, so the auto enrollment would still work?

@Ciraltos Ай бұрын

Devices joined to Entra DS are not Entra joined. Auto-enrollment with Windows AD joined devices requires Entra Connect Sync for Hybrid join. Entra Connect Sync is not supported with Entra DS. learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

@igoo5851 Ай бұрын

We are at the moment on a journey to replace Active Directory, but it will take years and lots of effort

@Ciraltos Ай бұрын

Windows AD has been in most businesses for over 20 years; it will take some time to remove all dependencies. It's good to recognize that at the beginning. Good luck!

@kristopherleslie8343 Ай бұрын

Seems like a convoluted offering

@jackharper6448 18 күн бұрын

I work in the IT industry and Microsoft is telling it’s clients to replace Active Directory with Entra ID so you’re 100% wrong. Microsoft is in the process of phasing out Active Directory. My organization already started the process of migrating. You should consult with Microsoft first before making videos like this. It’s false information.

@Ciraltos 18 күн бұрын

Please understand that Entra ID and Entra Domain Services (what the video is about) are two different services.