Azure AD Domain Services and Parent Inheritance

IT Guy 81 Reputation points
2023-09-06T17:58:10.34+00:00

Hi,

i was wondering what happens if you have a Parent domain Contoso.com

and then a child domain child.contoso.com,

and have a Azure AD Domain Services aadds.child.contoso.com with Contoso as a Managed domains not federated.

how does Azure AD handle those domains if you have to federate the parent one day?

since Federation on the Parent will filter down to all the subdomains, and i suppose it will effect the AADDS domain as well.

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
16,610 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 130.6K Reputation points MVP
    2023-09-06T20:22:47.8333333+00:00

    aadds.child.contoso.com is the managed domain right? The AADDS one.

    Its not part of the Azure custom domains so its not managed or federated by your org directly.

    https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview#how-does-azure-ad-ds-work


1 additional answer

Sort by: Most helpful
  1. Andy David - MVP 130.6K Reputation points MVP
    2023-09-06T18:53:30.9666667+00:00

    It shouldnt affect the AADDS domain, the AADDS domain has its own unique FQDN and isnt really related to the domains defined in Azure.

    1 person found this answer helpful.