In this tutorial, you will learn how to join a Windows Server instance to Azure AD. In this exemple, we will use a V2 Cloud Windows Server instance. Since Windows Server VMs cannot be directly joined to Azure AD, you need to set up an Azure AD Domain Service (AAD DS).
It will be synchronized with your Azure AD and allow the VM to join the domain. In fact, AAD DS is an online Domain Controller allowing us to join Cloud Computers to azure using the standard way like with an on-premises domain. Therefore, it also requires a VPN between the VMs and the Azure Network. Here is a good link explaining AAD DS.
There are multiple costs associated with Azure AD DS setup. Microsoft is charging by the hour for most of the resources needed to link your Azure AD DS to external Virtual Machines.
NOTES: You will need to be on our Business plans to finish the set up with a Site-to-site VPN. It’s not possible to do a Site-to-site VPN in the Singapore region. There are other methods to connect your AD DS that we can explore together. Feel free to reach out to [email protected]
Build a Windows Server based VM
Select Create a resource
Type domain and select Azure AD Domain Services to get to this page
Fill out the information as shown below: select a resource group – choose a DNS domain name – select your region and SKU (standard here) – forest : user . Click Next
Create a new Virtual Network. Name your Virtual Network – select the address range and the subnet(s). Please note that 10.0.0.0/16 is reserved for V2 Cloud internal use. It could cause conflict so it’s better to use another. Select OK and Next.
Change nothing under Administration click next. It can be changed later.
Nothing to do on synchronization, click next. It can be changed afterward
Security settings. Leave the default ones. It can be changed later.
Enter a tag name if needed. This is optional to organize and manage your different resources. Click Next.
Review the information and click Create
Click on go to resource
Click on home, Active Directory and then Group and then Members
Select add members and then search for your user and click select. Users will need to reset their password once they are added or they won’t be able to connect to the domain.
Now we need to create a Site to site VPN. Select Virtual Network and select the virtual network you created above. Select Address space; Enter the new IP address space and click Save.
Go to Subnets, add a new subnet and click Save.
Go back to Home and select Virtual Network Gateway. Select Create.
Name your Gateway – choose the region – select Virtual Network Gateway – Subnet should appear automatically.
Scroll down, create a new Public IP, enter a name for your public IP, select Availability zone and click next Tags.
Don’t change anything, click on Review + Create. Review the information and click on create.
Click on resources to see your new Public IP address
To create the Local Network Gateway, you will need to reach V2 Cloud support to provide you with the IP address of V2 Cloud’s gateway and all the VPN information. Go back to your Azure Portal. Search local network gateway. Select create.
Enter the information provided by V2 Cloud, select Resource group – select Region – name the Gateway, IP address is the IP from V2 Cloud Gateway and Address space is the local IP address of your Virtual Machine
Click on Review + create and select Create.
Go back to the page with your Virtual Network and select the one you created. Navigate to Overview and Connected devices. Select the Gateway you created.
Select connection and Add
Enter a name for your VPN, select Site-toSite (IPsec) – select your Local Network Gateway and IKEv2. The preshared key (PSK) is provided by V2 Cloud. Click OK.
Go to configuration and click on Custom under IPsec /IKE policy and fill as shown below. This information should come from V2 Cloud to be sure it matches. Click save.
Go back to Overview, hit refresh and the status will change to connected. This can take a few minutes.
You can now follow this tutorial to Join a Computer to a Domain.
You are done!
There is a better way to do IT with V2 Cloud
By using V2 Cloud, you get access to a fully-integrated virtual desktop solution, without the traditional complexity of other cloud providers.
There is an easier way to enable secure remote access to employees without sacrificing end-user experience and performance.
V2 Cloud offers a cloud desktop infrastructure with
- No hidden fees
- No complicated setup
- No contracts
- Flat-rate pricing model
We're the #1 virtualization solution for small businesses. Create virtual desktops, servers, and applications to improve productivity and significantly reduce your IT costs.