Azure VM - Domain Controller

Question

Hey All,

I implemented a VM domain controller in Azure.

Then I implemented a Windows 10 client on Azure in the same network.

What I want to know is this !!!

What is the best practice to when implementing a domain controller VM in azure and have workstations in azure join it ?

My windows 10 client in azure cannot join my domain controller in the Azure network as it cannot resolve the domain name. The reason why it cannot resolve the domain name is because the windows 10 client gets the dynamic DNS address from the Azure DHCP.

Is there a way to modify the Azure DHCP so it can give out my domain controller's IP address as the primary dns server ?

thanks !!!

Answer 1

You can specify the DNS server for VMs. And you have two choices. One is the configuration of NIC level. Another is
the configuration of VNet level.

• NIC level : https://learn.microsoft.com/en-us/azure/virtual-network/manage-virtual-network#change-dns-servers
• VNet level : https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface#change-dns-servers

Best regards.

Answer 2

Hello,
You cannot use a Domain Controller on a VM in Azure because Azure uses SDN (Software Defined Networking), hence, does not support protocols such as LDAP / Kerberos. If you want to join the cloud hosted windows 10 workstation to a domain, use the Azure Active Directory Domain Services (Not Azure Active Directory). This will be implemented on a VNET. And you can change the DNS settings of the window 10 workstation VNET to point to the AADDS instance you created earlier. You'll need to setup VNET peering too.

Thank you very much.