Azure Active Directory Domain Services Reviews

Azure AD DS is a solid, no-fuss bridge that lets your legacy apps speak their native language (LDAP, Kerberos, Group Policy) without you babysitting domain controllers. It just works — and in infrastructure, that's everything.

Nothing, everything is working perfectly.

Azure AD DS solves the headache of running legacy apps and domain-joined workloads in the cloud by providing LDAP, Kerberos, and Group Policy without you managing a single domain controller. The result is less infrastructure burden, faster cloud migrations, and your users logging in with the same credentials they already have.

Azure Active Directory is one of the best options for domain services. With this AD, I can integrate multiple applications through SSO. Azure Active Directory Domain Services is also very easy to use because of the UI. I can easily manage my office employees’ identities.

Azure Active directory is very useful tool and customer support also very respectful and they gives prompt responce so, still now i'm not faced any disliked things.

Our requirement is to provide access to multiple platforms using a single set of credentials. To achieve this, we created user accounts in Azure Active Directory Domain Services and enabled SAML-based access to tools such as AWS, PAM360, and Endpoint Central.

I like Azure Active Directory Domain Services for its Ease of Use and Ease of Implementation, strong Customer Support, frequent Frequency of Use for legacy workloads, sufficient Number of Features, and seamless Ease of Integration with Azure AD and applications.

Admin controls feel limited, there’s no support for schema extensions, and the sync is one-way. Combined with the costs, it ends up feeling restrictive for more advanced or complex Active Directory needs.

Azure AD DS addresses legacy application dependencies on traditional Active Directory by delivering managed domain services in Azure. It reduces the overhead of running and maintaining domain controllers, simplifies migration efforts, and helps centralize identity through Azure AD. Overall, it supports secure, faster cloud adoption without requiring a redesign of existing authentication.

I love that I no longer have to maintain, secure, or stay awake at night worrying about a traditional domain controller. Having that entire layer abstracted away—and not having to think about patching, replication, or backups anymore—is phenomenal. The implementation is quick and easy, which is surprising given that this is such a cornerstone of enterprise IT. We were able to lift and shift our existing Azure AD identities, and it also let us move applications that still required a more traditional AD instance without all the usual deployment overhead. That level of integration, along with those features, is rare in a specialized product.

While I appreciate the reduced operational overhead, it’s worth noting that administrative control is also reduced compared with traditional Active Directory instances. I can’t perform full domain admin operations, or even make schema modifications, which limits some more advanced use cases (I only ran into one example, but it still mattered). In addition, because Microsoft manages the domain controllers, replication and configuration changes can take time to propagate, and I no longer control when those changes are forced.

It solves the challenge of running legacy applications that provide critical business functions and still require traditional AD authentication in cloud environments. In our case, this is especially important for SQL Server back ends that depend on language packs that aren’t available in cloud-managed SQL instances.

The greatest advantage is the deployment of domain services (LDAP, Kerberos, NTLM) without having to patch, secure, or back up the individual domain controllers. Microsoft takes care of the uptime and the deployment of the two nodes necessary for high availability.

It's frustrating that, despite being a domain service, you don't have Domain Admin or Enterprise Admin permissions. You are limited to the "AAD DC Administrators" group. This means that many advanced configuration tasks or software installations that require deep access to the directory simply cannot be performed.

Eliminate the operational burden of managing, patching, and backing up traditional domain controllers. It benefits me by reducing the time spent on basic infrastructure tasks, allowing resources to focus on identity management and tenant security.

What I appreciate most about Azure Active Directory Domain Services is its seamless integration with Azure AD. It is a managed service that supports legacy applications, making it easier to maintain compatibility. The simplified hybrid setup is another advantage, along with high availability and scalability. Additionally, I find its cost efficiency to be a significant benefit.

What I find challenging about AAD DS is the limited administrative control it offers, especially when compared to traditional on-premises Active Directory. There are noticeable feature gaps, and the lack of support for schema extensions can be restrictive. Managing hybrid scenarios can also become quite complex. Additionally, cost is a significant factor to consider, and the options for backup and restore are limited.

Azure Active Directory Domain Services (AAD DS) addresses several key challenges by removing the requirement for on-premises domain controllers, enabling support for legacy authentication protocols, and streamlining hybrid cloud integration. It also offers centralized identity management, along with high availability and enhanced security. The main benefits include cost savings, accelerated cloud adoption, improved security, greater operational efficiency, and better compliance and reliability.

Our domain controller is hosted on Azure, while our Active Directory Connectors are located on-premises. If any issues arise, we are able to set up a new Active Directory Connector within 30 minutes.

The cost of credits is quite high, and I believe it should be lower.

We are utilizing this service as part of our disaster recovery strategy for our on-premises domain controllers.

.Seamless integration with Azure AD

Simplified Management

Scalability and Flexiblity

Enhanced Security

Maintains all the required and important information of a Company

Nothing to Dislike if you once learns how to manage it.

After applying this the big issue resolved was managing the vast amount of data.

but This is like Sea there is much more things which can easily be managed through this.

Global single sign on support for multiple SAS service. It support MFA for more security.

Third party enterprise apps integration need approval.some time it will not be so easy.

Remot user authentication and policy push from intune.