Why do we need On Premises Active Directory when we can just use 'Micrsoft Azure' where you have everything just like the window server?

Hi @TechQ

I would recommend to ask your teams why this is... normally this is due to historical structures...

If some application still need to be on premise and are using that "old" AD and nobody would like to try out how to migrate... then those old structure kept maintained.
Generally you are right, you don't need an onpremise AD if you have an AAD, all servers could be deployed in the cloud and even those onpremise could be administered from within Azure... but that needs some additional work to check which application/server needs some extra work to realise it.

Maybe nobody wanted to take the "risk" (aka extra work/testing) or it was not planned within the budget...

technically, your idea/understanding is correct.

I hope my answer is helpful to you,

Your
Bjoern Peters

If the reply was helpful, please upvote and/or accept it as an answer, as this helps others in the community with similar questions. Thanks!

On prem AD and Azure AD are not exactly the same, it isn't as simple as AAD being the new cloud version, there are differences. On prem AD supports LDAP, NTLM, Kerberos, and a hierarchal directory structure, where AAD does not. Both can be used together as a hybrid environment, using Azure AD Connect to...well...connect your AAD tenet to your on prem AD.

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Please accept this as an answer if it was helpful.