Can we set up on-premise Domain Controller to sync to Domain Controller in Azure (Hybrid)

Reez Ali 21 Reputation points
2021-11-24T21:56:18.537+00:00

Hello,

We have on-premise Domain Controller; we want to sync that to Azure by setting up Domain Controller in Azure (Hybrid)

  1. Can you please help me to know steps in setting up second Domain Controllers i.e. in Azure
  2. If On-premise Domain Controller is down, can user still authenticate to Domain Controller in Azure?

In our current environment we are syncing Users and Devices to Azure because of Office 365 Subscription.

Please let me know if you have any counter questions

Thank you,

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
12,755 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Max M 6 Reputation points
    2021-11-25T21:22:40.273+00:00

    You absolutely can setup a domain controller in that manner if you already have S2S VPN or express route connectivity to the vnet which you intend to deploy the Azure Domain Controller into.

    A good place to start is here: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/adds-extend-domain , with the managability considerations being especially important.

    In regards to question 2: You'd have to create a new site, ensure that your users have visibility to it from network perspective and that DNS srv records are created for the new site. One thing to consider is where the PDC is and how you'd move that around in the event of a localized issue with the current PDC.

    No comments