Can we create a domain controller on an Azure Virtual Machine?

Question

Is it possible to promote a domain controller on an Azure Virtual Machine? We have several Azure virtual machines and wish to join them to a domain.

Answer 1

Hi @LucasBudas-9886

If you want create new domain, yes it's possible. You can also use Entra Domain Services managed domain for virtual machine in Azure to avoid creating new domain.

If you want promote a new domain controller in a existing domain , you should configure VPN between Azure and on-premise network to ensure AD replication.

Please take a look at this article if you have a existing domain:

Tutorial: Create a site-to-site VPN connection in the Azure portal

---

Please don't forget to accept helpful answer which helps users to know the answer solved the author's problem.

Answer 2

Hi @Lucas Budas ,

yes this is possible.

A step-by-step description you will find here: How to Deploy a Domain Controller in Azure

I would recommend to add a small data disk (4 GB) with disabled host cache to store the NTDS folder.

This can be done during the creation wizard of the Azure VM or later before installation of the AD service.

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten