Azure AD Domain Services and Parent Inheritance

IT Guy 101 Reputation points
2023-09-06T17:58:10.34+00:00

Hi,

i was wondering what happens if you have a Parent domain Contoso.com

and then a child domain child.contoso.com,

and have a Azure AD Domain Services aadds.child.contoso.com with Contoso as a Managed domains not federated.

how does Azure AD handle those domains if you have to federate the parent one day?

since Federation on the Parent will filter down to all the subdomains, and i suppose it will effect the AADDS domain as well.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,471 questions
0 comments No comments
{count} votes

Accepted answer
  1. Andy David - MVP 147.7K Reputation points MVP
    2023-09-06T20:22:47.8333333+00:00

    aadds.child.contoso.com is the managed domain right? The AADDS one.

    Its not part of the Azure custom domains so its not managed or federated by your org directly.

    https://learn.microsoft.com/en-us/azure/active-directory-domain-services/overview#how-does-azure-ad-ds-work


1 additional answer

Sort by: Most helpful
  1. Andy David - MVP 147.7K Reputation points MVP
    2023-09-06T18:53:30.9666667+00:00

    It shouldnt affect the AADDS domain, the AADDS domain has its own unique FQDN and isnt really related to the domains defined in Azure.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.