Want is the best practices and best way to implement red domain for new tenant?

Question

Want is the best practices and best way to implement red domain for new tenant?

Khushi 0

Hi,

I want to know how to set up the red domain in a best way for a new tenant? Actually in our previous tenant red domain implemented and we were facing lots of issue like we can not manage/ edit the group policy etc. so what is the best practices and how we can implement it in a best way? please help me on this.

Thanks!

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-11-13T07:15:15.9633333+00:00

@Khushi

Thank you for posting this in Microsoft Q&A.

I wanted to check what do you mean by "red domain".

Can you also share the task that you are trying to perform?
Khushi 0 Reputation points

2023-11-13T08:56:11.35+00:00

Hi,

Maybe this link help to you , what exactly I am looking here https://www.firstware.com/en/blog/deploying-red-forest-and-iam-in-active-directory-environments/
Khushi 0 Reputation points

2023-11-15T10:42:23.37+00:00

Any update on this?

Thanks
Khushi 0 Reputation points

2023-11-23T03:14:38.55+00:00

Anyone can you please help on this?

1 answer

Your answer

Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-11-13T07:15:15.9633333+00:00

@Khushi

Thank you for posting this in Microsoft Q&A.

I wanted to check what do you mean by "red domain".

Can you also share the task that you are trying to perform?
Khushi 0 Reputation points

2023-11-13T08:56:11.35+00:00

Hi,

Maybe this link help to you , what exactly I am looking here https://www.firstware.com/en/blog/deploying-red-forest-and-iam-in-active-directory-environments/
Khushi 0 Reputation points

2023-11-15T10:42:23.37+00:00

Any update on this?

Thanks
Khushi 0 Reputation points

2023-11-23T03:14:38.55+00:00

Anyone can you please help on this?

Answer 1

JimmySalian-2011 42,496

Hi Khushi,

There is no such concept of Red Forest like we use to have on local AD Infrastructure, if you are looking to leverage Entra AD for authentication and implementing controls for your tenant I will suggest you to explore Entra AD Directory Services, Azure Active Directory Domain Services (Azure AD DS), part of Microsoft Entra, enables you to use managed domain services—such as Windows Domain Join, group policy, LDAP, and Kerberos authentication—without having to deploy, manage, or patch domain controllers.

Compare the different variants - https://learn.microsoft.com/en-GB/entra/identity/domain-services/compare-identity-solutions

Deploy Azure AD DS - https://learn.microsoft.com/en-gb/entra/identity/domain-services/tutorial-create-instance

Security wise you can explore here - https://azure.microsoft.com/en-gb/explore/security

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

Khushi 0 Reputation points

2023-12-21T13:59:17.05+00:00

Hi @JimmySalian-2011,

I am talking about this https://learn.microsoft.com/en-us/security/privileged-access-workstations/esae-retirement.

As mentioned it is in retired state, but still we want to implement this for our on-prem. Could you please me to configure this.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Khushi 0 Reputation points

2023-12-23T03:47:53.8166667+00:00

Anyone can you please help me on this, actually I have not found any configuration article for this. Please help me as soon as possible.

https://learn.microsoft.com/en-us/answers/questions/481765/bastion-forest-vs-red-forest-(esae)

Share via

Want is the best practices and best way to implement red domain for new tenant?

1 answer

Your answer