This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 71%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYG%3C/text%3E%3C/svg%3E)
Hi,
I do not manage to get krbtgt after setting up Azure Active Directory Domain Services with Azure AD.
I dont want to setup on Prem soultion for it, I would only like to use Cloud solution and manage few on prem NAS.
I have managed to joined the QNAP nas to azure AD how ever, I can not seem to setup the kerberos on Azure AD Machines,
I have tried to use the command Set-AzureADKerberosServer
I keep getting
Set-AzureAdKerberosServer : Failed to create Azure AD Kerberos Server: Error sending directory request: The user has
insufficient access rights.
Hi Yair,
AFAIK, Kerberos is only supported via Azure AD Connect sync user passwords not directly in ADDS, I will suggest you can contact your Microsoft Account Manager and get someone from Microsoft to assist on this requirement.
==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Are you positive about this ?
I thought Azure Active directory domain services does password hash.
After all - I have installed AADDS and then i managed to joined a machine to the domain with user/password.
I was able to join the machine only after i refreshed the user password.
So hee you go.
this article states there is sync between 2:
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/synchronization
I think you are referring to Active directory domain services, not Azure Active directory domain services.
in AADDS i think the hashes are synced as i am Able to see users in the directory too.
If the users are there + the domain... why i cant get all this to work
help
Any progress on this?
==
Please don't forget to upvote and Accept as answer if the reply is helpful