AD Sync to Azure

Question

AD Sync to Azure

Mike Chilson 0

We are syncing our local AD to Azure. Do we need Microsoft Entra Domain Services - Standard or is there an alternative?

Rukmini 37,695 Reputation points Microsoft External Staff Moderator

2025-12-11T21:27:29.8266667+00:00
Hey Mike Chilson! It sounds like you're wondering whether to use Microsoft Entra Domain Services - Standard for syncing your local Active Directory (AD) to Azure, or if there are alternatives.

Here's a bit of info to help you out:

Microsoft Entra Connect Cloud Sync: This is a great option for syncing your local AD to Microsoft Entra ID. It's designed to accommodate hybrid identity goals, allowing for synchronization of users, groups, and contacts with minimal on-premises footprint. It uses a cloud provisioning agent instead of relying solely on an on-premises server setup. If you're looking for simplicity and efficiency, this might be the way to go.

Microsoft Entra Domain Services: This service provides managed domain capabilities, allowing you to use services like LDAP, Kerberos, and NTLM without having to set up and maintain domain controllers in Azure. However, if all you need is to sync identities and you don't require the full Active Directory features, then using Entra Connect Cloud Sync might suffice.

If you decide on Microsoft Entra Domain Services, be sure that it aligns with your organization's requirements for directory-based functionalities and access.

Alternatives:

If you don't require managed domain features and only need basic identity synchronization, Microsoft Entra Connect (without the cloud sync variant) could be a simpler option, especially for larger or more complex environments where you need tighter control over the sync configurations.

I hope this helps clarify your options! If you have more specific requirements or scenarios, feel free to share!

References

Microsoft Entra Connect Cloud Sync Overview

Learn about Microsoft Entra Domain Services

Plan for cloud sync deployment

If you need more details or specific advice, here are some follow-up questions you might consider:

What specific capabilities are you looking to achieve with your Azure sync?

Are you currently using any existing synchronization tools?

How many users/groups do you plan to synchronize, and what are your performance expectations?

Do you have any specific compliance or security requirements that need to be met?

Feel free to provide more info, and I'll be happy to assist you further!

2 answers

Your answer

Answer 1

Tyra Nyambura 0

@Mike Chilson (RUN STUDIOS LLC) the alternative I'd like to suggest would be Microsoft Entra Connect, if that helps

Mike Chilson 0 Reputation points

2025-12-11T20:21:14.9+00:00

Thank you Tyra

Answer 2

When syncing your local Active Directory (AD) to Azure, using Microsoft Entra Domain Services is not strictly necessary, but it can be beneficial depending on your requirements. Microsoft Entra Domain Services provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication, which can be useful for applications that require these features in Azure.

If your applications do not require these specific features and you are primarily using Microsoft Entra ID for identity management, you may not need to implement Microsoft Entra Domain Services. Instead, you can use Microsoft Entra Connect to synchronize your local AD with Microsoft Entra ID, which allows users to access cloud resources without needing a managed domain.

Ultimately, the decision will depend on the specific needs of your applications and infrastructure. If you need traditional Active Directory features in the cloud, then Microsoft Entra Domain Services would be the right choice. Otherwise, you can manage with just Microsoft Entra ID and Microsoft Entra Connect.

References:

Share via

AD Sync to Azure

Alternatives:

References

2 answers

Your answer