Azure AD Domain Services and Parent Inheritance

Question

Hi,

i was wondering what happens if you have a Parent domain Contoso.com

and then a child domain child.contoso.com,

and have a Azure AD Domain Services aadds.child.contoso.com with Contoso as a Managed domains not federated.

how does Azure AD handle those domains if you have to federate the parent one day?

since Federation on the Parent will filter down to all the subdomains, and i suppose it will effect the AADDS domain as well.

Answer 1

aadds.child.contoso.com is the managed domain right? The AADDS one.

Its not part of the Azure custom domains so its not managed or federated by your org directly.

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview#how-does-azure-ad-ds-work

Answer 2

It shouldnt affect the AADDS domain, the AADDS domain has its own unique FQDN and isnt really related to the domains defined in Azure.