Since Windows Server VMs cannot be directly joined to Azure AD, you need to set up an Azure AD Domain Service (AAD DS). It will be synchronized with your Azure AD and allow the VM to join the domain. In fact, AAD DS is an online Domain Controller allowing us to join computers to azure using the standard way like with an on-premises domain.
Another frequent question is “How do I join Windows Server 2019 to Azure AD?”.
You can now join Windows 2019 Server to Azure AD using Azure AD domain Join. This uses Azure Active Directory (AD) authentication for Azure virtual machines running Windows Server 2019 Datacenter edition or Windows 10 1809 and later. This provides a centrally controlled, policy driven method for logging on to VMs and authenticating using Azure AD.
While we were writing we ran into the question “How do I join a domain in Azure AD DS?”.
On the Start screen, open Server Manager. In the left pane of the Server Manager window, select Local Server. In the System Properties window, select Change to join the domain. In the Domain box, specify the name of your Azure AD DS-managed domain, and then select OK.
How to join a computer to a managed Domain in azure?
1 Sign in to the Azure portal. In this tutorial, you create a Windows Server VM to join to your managed domain using the Azure portal. 2 Create a Windows Server virtual machine. To see how to join a computer to a managed domain, let’s create a Windows Server VM. 4 join the vm to the managed domain, and 3 connect to the windows server vm as well are a couple extra things to look into.
Is Azure AD join a complete enterprise directory service?
It may not be a complete enterprise directory service as such. The Azure Ad Join is a service specifically designed for the small and mid-sized businesses that do not have an on-premise active directory infrastructure built explicitly for the Windows Server.