Also, the Citrix Virtual Apps and Desktops service resources are deployed based on our CSP reference architecture. For this implementation, we are deploying Azure ADDS as a user forest, without configuring a trust to an external on-premises AD environment.

If resources are deployed to a different VNet, it must be connected to the Azure ADDS VNet via a VNet peering.Īzure ADDS can be deployed as a user forest, or a resource forest. The Azure ADDS instance is deployed directly to a Virtual Network (VNet) within your subscription, resources can be deployed to the same VNet, or in different VNets. Additionally, Domain Admin and Enterprise Admin permissions are not available under the managed service. Domain controller access is restricted, and you can only manage your domain by deploying management instances with Remote Server Administration tools. Azure AD Domain Services automatically synchronizes identities from Azure AD to your managed AD environment.Īzure ADDS automatically deploys and manages highly available Active Directory domain controllers on your Azure subscription.

While Azure AD leverages modern authentication and authorization protocols like OpenID Connect and OAuth 2.0, Azure ADDS utilizes traditional protocols that rely on Active Directory, like LDAP and Kerberos.

Azure ADDS includes enterprise features like domain-join and group policy. Not to be confused with Azure AD, which is a cloud-based identity and authentication service for Microsoft services, Azure AD Domain Services (ADDS) provides managed domain controllers. Azure Active Directory Domain Services is a fully managed Active Directory service on Microsoft Azure.

Azure active directory domain services