Blogs by Ashwin

Azure Active Directory (Azure AD) Azure AD is the Microsoft-managed, cloud-based, identity as well as access management solution which is capable of providing secure access for organizations and individuals to a variety of cloud-resident services, including Azure, Office 365, Microsoft Dynamics CRM online, and Microsoft Intune. It also offers multitenancy and scalability: Multitenancy- Azure AD is multitenant by design, which ensures isolation between its individual directory instances. From a technical point of view, the term tenant represents an individual Azure AD instance and as an Azure customer, you can create multiple Azure AD tenants. This approach is more useful if you want to test Azure AD functionality in one without affecting the others and each Azure AD tenant serves as a security boundary as well as a container for Azure AD objects such as users, groups, and applications.  Scalability- Azure AD is the world's largest multitenant directory, hosting over a million direc...

  Active Directory Domain Services (AD DS) AD DS is widely known for providing a variety of business-related and technological benefits by serving as an identity as well as access management solution for on-premises, independently managed isolated environments and the most of its characteristics reflects this underlying premise. There are three main scenarios that involves AD DS and Azure VMs: AD DS deployed to Azure VMs without cross-premises connectivity- This deployment results in the creation of a new forest, with all domain controllers residing in Azure. You can use this approach if you plan implement the Azure-resident workloads hosted on Azure VMs that rely on Kerberos authentication or GROUP Policy but have no on-premises dependencies. Existing on-premises AD DS deployment with cross-premises connectivity to an Azure virtual network where the Azure VMs reside- This scenario uses an existing on-premises AD environment to provide authentication for Azure VM-resident work...