RyanTech Blog

News and Insights

Migrate On-Premise Active Directory to Azure

​Yes, on-premise servers for Active Directory are still a thing, but they are gradually going away as people are realizing they can move this type of thing into the Cloud. Active Directory is something that companies have been using for a very long time to manage user and security protocols and information within their business, and typically this has been running on a server in the building, but the Cloud has changed things drastically over the years.


There are a few different ways that you can approach moving your on-prem AD server into the cloud, some more common than others. First, there is the approach of completely coming off of on-premise AD and moving that into Azure AD. This is the less common of the approaches and we see and perform very little of these types of migrations. This way can take a lot more time and effort to get done properly as manage desktop policies and the environment as a whole can look a little bit different in on-prem vs. Azure AD. Typically, we try to steer people in the direction of a hybrid approach ( I will talk about this below) since on-prem AD tends to be a bit more robust than Azure AD in itself. If your company is using on-prem AD and has little services being managed within it, then moving into Azure AD may be the right choice.

The second is a hybrid approach using AD Connect and Azure AD Hybrid. This is the direction that we typically like to point customers in as you can get the best of both worlds and maintain the functionality that you're used to. The benefit of hybrid is that we can join on-prem AD managed devices to Azure AD so you get the benefits of Azure AD and it can be managed from the cloud. Here are some capabilities and benefits of Hybrid Azure AD:


Capabilities:

  1. Single sign on to both cloud and on-premises resources
  2. Conditional access through domain join or through Intune/Endpoint Manager if co-managed

  3. Self-service password reset and Windows Hello PIN reset on lock screen

  4. Enterprise State Roaming across devices

Benefits:

  1. The environment supports down-level devices running Windows 7 and 8.1
  2. Able to continue to use Group Policy to mange device configuration
  3. Able to continue to use existing imaging solutions to deploy and configure devices
  4. Able to have Win32 apps deployed to these devices that rely on Active Directory machine authentication



We have gotten different requests when it comes to bringing AD into the cloud and there are different options that can be discussed. We are happy to discuss any and all items with you if you are thinking of moving into the cloud and we have experienced professionals who have done this over and over again, so feel confident in coming to RyanTech for help!




Recent Posts


We Speak Cloud

Our dedication is to the cause of truly helping our customer's business flourish by fine-tuning their own business operations.

Request a Demo
image
image
image
image