Stretched Active Directory to Azure IaaS

Extending your local AD Domain Services to Azure IaaS provides you with a very flexible scenario to use your line-of-business applications in the cloud. To use this integration, you need to build a VPN or Express Route connection to Azure.

Domain controllers are highly sensitive roles and will have the most concerns focus on the trust of the service. Many alternative solutions don't support seamless lift and shift migration to Azure like this one:

Follow the following notes:

• Domain controllers (RW): The best choice for IaaS workloads and will be aware of your replication considerations
• Domain controllers (RO): Normally used for scenarios with poor security and not an appropriate choice for IaaS workloads
• Resource forest scenarios: Not recommended for use in IaaS

In the next section, we'll take a look at the Azure AD B2B integration scenario.