Off-Site AD and Group Policy

[zeegy]

Morning all,

I am getting asked more and more about off-site ad and group policy.

Customers on-prem domain controllers are ageing and with the invent of the cloud a lot of people are wanting to lease cloud services rather than procure and rely on local services.

Azure AD doesnt seem to do the job with group policy, so what other options are there?

Site-to-Site VPN with site and the cloud with a cloud based DC? seems a little janky really



Are there any solutions or recommendations to pull off what I'm wanting to do?

 

[zeegy]

I'm probably behind the curve but I'd run a mile at off site AD. Azure AD Domain Services (not the same as Azure AD) is what you want to be looking at but they can pry my local hosts and VMs from my cold, dead hands.

This is it, and I agree completely. if they just needed to be domain with no other control then AADS would be a solution, physical DC on site (even just a microserver) and on cloud would be what i would consider too, but they want cloud completely.

Sadly, this is not what people want any more, which, is a shame.