How to manage on-premise servers using Azure AD credentials?Connect Azure Active Directory to on premise customer ADSetup on-premise AD + same users at Exchange Online (+ Azure AD?)Manage Client Servers without joining domainScheduled Task in Windows Server 2016, run by non-admin UsersRemote Desktop Connection to Azure Server using Office365 User not workingAzure AD Users logging into Remote Desktop ServerWindows 2016 Server on site domain join with Azure ADAccounts are in Azure AD, we now have an on-premise server.How to stop syncing Windows Server with Azure Active DirectoryHow To Fix an Azure-Only Active Directory Environment
How do you cope with rejection?
Taylor series leads to two different functions - why?
Physically unpleasant work environment
Largest memory peripheral for Sinclair ZX81?
Told to apply for UK visa before other visas
Can 2 light bulbs of 120V in series be used on 230V AC?
Sort a section of a file
How many Dothraki are left as of Game of Thrones S8E5?
RegEx with d doesn’t work in if-else statement with [[
Pedaling at different gear ratios on flat terrain: what's the point?
Why is so much ransomware breakable?
Cathy’s Composite party is powered by three Prime Pals. Can you find them?
Why would you put your input amplifier in front of your filtering for and ECG signal?
Gambler's Fallacy Dice
What color to choose as "danger" if the main color of my app is red
Can a large hemispherical planet be stable?
I recently started my machine learning PhD and I have absolutely no idea what I'm doing
Can a generation ship withstand its own oxygen and daily wear for many thousands of years?
How come Arya Stark wasn't hurt by this in Game of Thrones Season 8 Episode 5?
Are spiritual pleasures > carnal pleasures, according to Catholicism?
Working hours and productivity expectations for game artists and programmers
on the truth quest vs in the quest for truth
Using `printf` to print variable containing `%` percent sign results in "bash: printf: `p': invalid format character"
How was the blinking terminal cursor invented?
How to manage on-premise servers using Azure AD credentials?
Connect Azure Active Directory to on premise customer ADSetup on-premise AD + same users at Exchange Online (+ Azure AD?)Manage Client Servers without joining domainScheduled Task in Windows Server 2016, run by non-admin UsersRemote Desktop Connection to Azure Server using Office365 User not workingAzure AD Users logging into Remote Desktop ServerWindows 2016 Server on site domain join with Azure ADAccounts are in Azure AD, we now have an on-premise server.How to stop syncing Windows Server with Azure Active DirectoryHow To Fix an Azure-Only Active Directory Environment
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
We run a small business and have begun to use Azure AD to manage our users. Our Windows 10 workstations are connected to the Azure domain via "Connect to work or school" setting, and that works nicely.
The problem is we have a couple of Windows Server 2016 installations in the office. Currently they are setup with local admin accounts and people log in as that in order to administer them.
What we really want is to be able to grant admin rights to our Azure AD users and allow them to login to the server with their regular Azure AD credentials.
What is the equivalent of "Connect to work or school" for Windows server 2016? How do we allow Windows server to grant admin rights to specific AD users?
I have seen Azure AD Connect, but that seems to require us to setup AD locally and sync it with Azure. I'm concerned, if this is the solution, that it will complicate our admin load. We are just looking for a really simple solution. If Azure AD connect is the answer, what is the simplest way to set it up to achieve the most basic on-site server administration for Azure AD users?
azure-active-directory windows-server-2016
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
add a comment |
We run a small business and have begun to use Azure AD to manage our users. Our Windows 10 workstations are connected to the Azure domain via "Connect to work or school" setting, and that works nicely.
The problem is we have a couple of Windows Server 2016 installations in the office. Currently they are setup with local admin accounts and people log in as that in order to administer them.
What we really want is to be able to grant admin rights to our Azure AD users and allow them to login to the server with their regular Azure AD credentials.
What is the equivalent of "Connect to work or school" for Windows server 2016? How do we allow Windows server to grant admin rights to specific AD users?
I have seen Azure AD Connect, but that seems to require us to setup AD locally and sync it with Azure. I'm concerned, if this is the solution, that it will complicate our admin load. We are just looking for a really simple solution. If Azure AD connect is the answer, what is the simplest way to set it up to achieve the most basic on-site server administration for Azure AD users?
azure-active-directory windows-server-2016
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56
add a comment |
We run a small business and have begun to use Azure AD to manage our users. Our Windows 10 workstations are connected to the Azure domain via "Connect to work or school" setting, and that works nicely.
The problem is we have a couple of Windows Server 2016 installations in the office. Currently they are setup with local admin accounts and people log in as that in order to administer them.
What we really want is to be able to grant admin rights to our Azure AD users and allow them to login to the server with their regular Azure AD credentials.
What is the equivalent of "Connect to work or school" for Windows server 2016? How do we allow Windows server to grant admin rights to specific AD users?
I have seen Azure AD Connect, but that seems to require us to setup AD locally and sync it with Azure. I'm concerned, if this is the solution, that it will complicate our admin load. We are just looking for a really simple solution. If Azure AD connect is the answer, what is the simplest way to set it up to achieve the most basic on-site server administration for Azure AD users?
azure-active-directory windows-server-2016
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
We run a small business and have begun to use Azure AD to manage our users. Our Windows 10 workstations are connected to the Azure domain via "Connect to work or school" setting, and that works nicely.
The problem is we have a couple of Windows Server 2016 installations in the office. Currently they are setup with local admin accounts and people log in as that in order to administer them.
What we really want is to be able to grant admin rights to our Azure AD users and allow them to login to the server with their regular Azure AD credentials.
What is the equivalent of "Connect to work or school" for Windows server 2016? How do we allow Windows server to grant admin rights to specific AD users?
I have seen Azure AD Connect, but that seems to require us to setup AD locally and sync it with Azure. I'm concerned, if this is the solution, that it will complicate our admin load. We are just looking for a really simple solution. If Azure AD connect is the answer, what is the simplest way to set it up to achieve the most basic on-site server administration for Azure AD users?
azure-active-directory windows-server-2016
azure-active-directory windows-server-2016
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
asked Oct 10 '16 at 1:06
SchneiderSchneider
47531021
47531021
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56
add a comment |
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56
add a comment |
2 Answers
2
active
oldest
votes
In this case (for Windows Server), even though you have successfully synced your on premise Computer account into Azure AD using AAD Connect, you can't manage to control who can or cannot manage the server just as doing that on on-premise, even allow AAD user to log in.
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
add a comment |
Take a look at Azure AD DS - https://azure.microsoft.com/en-us/services/active-directory-ds/
If you have these servers in your on-premises environment it will require some networking (VPN) to be configured. AAD DS have limitations but if you need it only for managing security and domain join, do not require large directory structures, GPOs etc. it will be enough.
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f808047%2fhow-to-manage-on-premise-servers-using-azure-ad-credentials%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
In this case (for Windows Server), even though you have successfully synced your on premise Computer account into Azure AD using AAD Connect, you can't manage to control who can or cannot manage the server just as doing that on on-premise, even allow AAD user to log in.
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
add a comment |
In this case (for Windows Server), even though you have successfully synced your on premise Computer account into Azure AD using AAD Connect, you can't manage to control who can or cannot manage the server just as doing that on on-premise, even allow AAD user to log in.
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
add a comment |
In this case (for Windows Server), even though you have successfully synced your on premise Computer account into Azure AD using AAD Connect, you can't manage to control who can or cannot manage the server just as doing that on on-premise, even allow AAD user to log in.
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
In this case (for Windows Server), even though you have successfully synced your on premise Computer account into Azure AD using AAD Connect, you can't manage to control who can or cannot manage the server just as doing that on on-premise, even allow AAD user to log in.
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
answered Oct 10 '16 at 12:53
Bifeng Dong - MSFTBifeng Dong - MSFT
26614
26614
add a comment |
add a comment |
Take a look at Azure AD DS - https://azure.microsoft.com/en-us/services/active-directory-ds/
If you have these servers in your on-premises environment it will require some networking (VPN) to be configured. AAD DS have limitations but if you need it only for managing security and domain join, do not require large directory structures, GPOs etc. it will be enough.
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
add a comment |
Take a look at Azure AD DS - https://azure.microsoft.com/en-us/services/active-directory-ds/
If you have these servers in your on-premises environment it will require some networking (VPN) to be configured. AAD DS have limitations but if you need it only for managing security and domain join, do not require large directory structures, GPOs etc. it will be enough.
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
add a comment |
Take a look at Azure AD DS - https://azure.microsoft.com/en-us/services/active-directory-ds/
If you have these servers in your on-premises environment it will require some networking (VPN) to be configured. AAD DS have limitations but if you need it only for managing security and domain join, do not require large directory structures, GPOs etc. it will be enough.
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
Take a look at Azure AD DS - https://azure.microsoft.com/en-us/services/active-directory-ds/
If you have these servers in your on-premises environment it will require some networking (VPN) to be configured. AAD DS have limitations but if you need it only for managing security and domain join, do not require large directory structures, GPOs etc. it will be enough.
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
answered Jan 10 '17 at 17:14
Tomasz OnyszkoTomasz Onyszko
1211
1211
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f808047%2fhow-to-manage-on-premise-servers-using-azure-ad-credentials%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Seems Windows Server 2016 Essentials may be an easier option - it appears to have a built in Azure AD integration more similar to Windows
– Schneider
Oct 10 '16 at 5:56