On Prem Domain Controller integration with Entra

Question

On Prem Domain Controller integration with Entra

Francis Mendez 0

Hello, I have a couple of computers that I want to join to Entra so that we can migrate away from the on Prem domain controller. I have followed how to Join computers via Entra. I have downloaded Azure Domain Connect to send info from my DC to Entra. The issue I am having is that the Entra joined pc's (signing in with their office 365 Credentials) cannot access the on prem shares. It would seem that the accounts I synced FROM my DC to Entra exist on Entra, but the accounts (O365 accounts) on Entra are not listed as users on my DC. How do I sync the two so they work together?

Server 2022

Answer 1

Givary-MSFT 22,576 Microsoft Employee

@Francis Mendez Thank you for reaching out to us, how are you syncing the users from on-premise AD/DC to Entra ? Are you using Microsoft Entra Connect Sync tool to sync users from on-premise AD to Entra ?

Very well explained here - https://www.youtube.com/watch?v=4Ip3h4kJxmw about this scenario which you are trying to achieve, please go through this.

Let me know if you have any further questions, feel free to post back.

Julian Sperling 76 Reputation points

2023-10-30T10:03:48.39+00:00
As long as you use SMB File Shares you will not be able to rid yourself of a domain Controller. The Protocol is not built for Web (or Cloud) Based Authentication.

You will have to either:

Migrate to SharePoint / OneDrive (or other Modern File Storage Solutions)

Move your onPrem Domain Controller to the Cloud and use Azure Files.

Alternatively if you cannot migrate Away from your OnPremises File Share you will have to continue managing your Users OnPremises and synchronizing them to the cloud.
Francis Mendez 0 Reputation points

2023-11-03T15:06:57.8+00:00

Thank you. I think the sync is working. Should I see the Office365 users (email login) on my DC? I would expect that my office users listed in Azure be listed in the users section of Active Directory Users and computers. They arent there.
Givary-MSFT 22,576 Reputation points Microsoft Employee

2023-11-10T03:18:07.1133333+00:00

@Francis Mendez Apologies for the delayed response, do you have on-premise domain verified in Microsoft Entra ID ?

On Prem Domain Controller integration with Entra

1 answer

Activity