Difference between AADS and Intune

Question

Difference between AADS and Intune

IT Admin 26

Hello experts,

I am an administrator used to the on-premise old system that is Build DC, join domain for devices, administer through GPO and Windows server.
I'm getting used to the "All in cloud" system of Azure.I'm a bit confused between AADS and Intune.
I don't want to have DC servers on-premise or from a VM. I want to manage all my users' devices through Intune and I find it very convenient.

1)But besides that I have a few devices that need to be joined to the domain like a synology NAS.Can I join this device to the domain via Intune?or do I have to enable AADS service to join it to the domain and get info users/group?

2)If I'm using Intune and have AADS enabled,will this affect users' connection to the domain?or are they the same?

3)as you know i am used to the way before, right click on ThisPC-Properties... and type Domain name and join!So if I declare the device on Intune or Add work or shool account according to Intune's instructions, will my device show the same Domain after I add the account?

Please help me answer these questions.

Thanks!

Accepted answer

0 additional answers

Your answer

Answer 1

Sreeju Nair 12,666

Azure Active Directory Domain Services (AD DS) offers managed domain services such as

Domain Joining
Group Policy
LDAP
Kerberos/NTLM Authentication

ADDS helps you to use domain services without you deploying / managing it.

Refer: https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview

With Intune, you can control how your organization devices are used including mobile, tablets and laptops. Intune is part of Microsoft's Enterprise Mobility + Security (EMS) suite. Intune integrates with Azure Active Directory (Azure AD) to control who has access and what they can access.
Refer: https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune

I recommend you to refer the following video to understand the difference between Azure AD and Intune.
https://www.youtube.com/watch?v=PBaFpCq2x9A

Hope this helps

IT Admin 26 Reputation points

2022-09-26T06:31:31.827+00:00

can you please answer in detail according to the 3 questions I have posted above,please!. Does that mean that I can use Intune to administrate users' devices, and other devices like Windows server or NAS synology I have to use AADS?
Sreeju Nair 12,666 Reputation points

2022-09-26T06:38:50.007+00:00

)But besides that I have a few devices that need to be joined to the domain like a synology NAS.Can I join this device to the domain via Intune?or do I have to enable AADS service to join it to the domain and get info users/group? - AADS is the directory service, whether you use Intune or not, you need Directory Services to add your devices to Domain.

2)If I'm using Intune and have AADS enabled,will this affect users' connection to the domain?or are they the same? - Since Intune helps you to ensure your devices are automatically enrolled in Azure AD. So intune is a management and monitoring part and directory services are provided by AD DS

3)as you know i am used to the way before, right click on ThisPC-Properties... and type Domain name and join!So if I declare the device on Intune or Add work or shool account according to Intune's instructions, will my device show the same Domain after I add the account? - When you define domain connection in intune, actually intune will actually add that device to domain.

Refer: https://learn.microsoft.com/en-us/windows/client-management/mdm/azure-active-directory-integration-with-mdm
IT Admin 26 Reputation points

2022-09-26T07:16:38.25+00:00

thank you very much!!!!!!!!!!!!!!!!
Jason Sandys 31,411 Reputation points Microsoft Employee Moderator

2022-09-26T17:52:58.72+00:00

AADDS and Intune are completely unrelated.

AADDS, like on-prem AD, is a directory service like provides identity and authentication services. GPOs exist as well but I'd never call GPOs true management or administration of devices.

Intune is a management system to configure and control the state of a device.

Thus, two basic, but distinct concepts: identity and management. For any of the rest here to make sense, you must keep these two in mind and separate and which components provide which. Specifically, ADDS, AADDS, and AAD all provide identity services (including authentication) while Intune provides management.

For a device to be managed by Intune, aka enrolled in Intune, it must also have an AAD (not AADDS or on-prem AD) identity. For Windows endpoints, this can be achieved using a full AAD join, a hybrid AAD join, or an AAD registration.

AADS is intended for Windows server OS instances hosted in Azure only. Any reference to anything on-prem, including non-Windows servers like your NAS devices, does not meet the intended purpose of AADDS.

You need to coordinate with your NAS vendor to determine the best method for your users to authenticate to it and what IdPs that it integrates with.

Also, just to clarify, no Intune cannot manage your NAS (or any NAS) and no ADDS, AAD, and AADDS do not manage anything (including NASes) as they only (once again) provide identity services.

Share via

Difference between AADS and Intune

0 additional answers

Your answer