How to join a Windows Server computer
to AzureAD

In this tutorial, you will learn how to join a Windows Server instance to Azure AD. In this exemple, we will use a V2 Cloud Windows Server instance. Since Windows Server VMs cannot be directly joined to Azure AD, you need to set up an Azure AD Domain Service (AAD DS).

It will be synchronized with your Azure AD and allow the VM to join the domain. In fact, AAD DS is an online Domain Controller allowing us to join Cloud Computers to azure using the standard way like with an on-premises domain. Therefore, it also requires a VPN between the VMs and the Azure Network. Here is a good link explaining AAD DS.

There are multiple costs associated with Azure AD DS setup. Microsoft is charging by the hour for most of the resources needed to link your Azure AD DS to external Virtual Machines.

NOTES: You will need to be on our Business plans to finish the set up with a Site-to-site VPN. It’s not possible to do a Site-to-site VPN in the Singapore region. There are other methods to connect your AD DS that we can explore together. Feel free to reach out to [email protected]

STEP 1

Build a Windows Server based VM

STEP 2

Select Create a resource

STEP 3

Type domain and select Azure AD Domain Services to get to this page

STEP 4

Select Create

STEP 5

Fill out the information as shown below: select a resource group – choose a DNS domain name – select your region and SKU (standard here) – forest : user . Click Next

STEP 6

Create a new Virtual Network. Name your Virtual Network – select the address range and the subnet(s). Please note that 10.0.0.0/16 is reserved for V2 Cloud internal use. It could cause conflict so it’s better to use another. Select OK and Next.

STEP 7

Change nothing under Administration click next. It can be changed later.

STEP 8

Nothing to do on synchronization, click next. It can be changed afterward

STEP 9

Security settings. Leave the default ones. It can be changed later.

STEP 10

Enter a tag name if needed. This is optional to organize and manage your different resources. Click Next.

STEP 11

Review the information and click Create

STEP 12

Click on go to resource

STEP 13

Click on home, Active Directory and then Group and then Members

STEP 14

Select add members and then search for your user and click select. Users will need to reset their password once they are added or they won’t be able to connect to the domain.

STEP 15

Now we need to create a Site to site VPN. Select Virtual Network and select the virtual network you created above. Select Address space; Enter the new IP address space and click Save.

STEP 16

Go to Subnets, add a new subnet and click Save.

STEP 17

Go back to Home and select Virtual Network Gateway. Select Create.

STEP 18

Name your Gateway – choose the region – select Virtual Network Gateway – Subnet should appear automatically.

Scroll down, create a new Public IP, enter a name for your public IP, select Availability zone and click next Tags.

STEP 19

Don’t change anything, click on Review + Create. Review the information and click on create.

Click on resources to see your new Public IP address

STEP 20

To create the Local Network Gateway, you will need to reach V2 Cloud support to provide you with the IP address of V2 Cloud’s gateway and all the VPN information. Go back to your Azure Portal. Search local network gateway. Select create.

Enter the information provided by V2 Cloud, select Resource group – select Region – name the Gateway, IP address is the IP from V2 Cloud Gateway and Address space is the local IP address of your Virtual Machine

STEP 21

Click on Review + create and select Create.

STEP 22

Go back to the page with your Virtual Network and select the one you created. Navigate to Overview and Connected devices. Select the Gateway you created.

Select connection and Add

STEP 23

Enter a name for your VPN, select Site-toSite (IPsec) – select your Local Network Gateway and IKEv2. The preshared key (PSK) is provided by V2 Cloud. Click OK.

STEP 24

Go to configuration and click on Custom under IPsec /IKE policy and fill as shown below. This information should come from V2 Cloud to be sure it matches. Click save.

STEP 25

Go back to Overview, hit refresh and the status will change to connected. This can take a few minutes.

You can now follow this tutorial to Join a Computer to a Domain.

You are done!