domain controller in the cloud for small office?
-
@mike-davis said in domain controller in the cloud for small office?:
With only 8 machines I have to weight that cost vs spinning up a windows Server and joining all the computers.
Assuming the cost of joining is the same (it's actually lower for Azure AD), then what cost are you weighing against?
-
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
-
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
And updating is free, Win 7 is about to be a decade old. I know they could be stuck for some reason, but most of the time, udpating is an option.
-
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
Good question, let me try that. I'll be back in an hour or so.
-
@mike-davis said in domain controller in the cloud for small office?:
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
It does not work for sharing. Just use a local account for that. The free version is very basic, sadly.
-
@scottalanmiller said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
And updating is free, Win 7 is about to be a decade old. I know they could be stuck for some reason, but most of the time, udpating is an option.
Exactly this - sounds like a great reason to force the upgrade to Win10.
-
@scottalanmiller said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
It does not work for sharing. Just use a local account for that. The free version is very basic, sadly.
Maybe I misunderstood what he was asking.
I read it to be - I have a Win10 machine joined to Azure AD - can I create a share on that Win10 machine and other Azure AD users can use their creds to access the share on my Windows 10 machine?
-
@dashrender said in domain controller in the cloud for small office?:
@scottalanmiller said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
It does not work for sharing. Just use a local account for that. The free version is very basic, sadly.
Maybe I misunderstood what he was asking.
I read it to be - I have a Win10 machine joined to Azure AD - can I create a share on that Win10 machine and other Azure AD users can use their creds to access the share on my Windows 10 machine?
That's how I read it, too.
-
@dashrender said in domain controller in the cloud for small office?:
I read it to be - I have a Win10 machine joined to Azure AD - can I create a share on that Win10 machine and other Azure AD users can use their creds to access the share on my Windows 10 machine?
yes, exactly this. That way with Azure I can set a password change policy, and when they do change their password, they can still access the share on the Windows 10 machine.
-
@mike-davis said in domain controller in the cloud for small office?:
@dashrender said in domain controller in the cloud for small office?:
I read it to be - I have a Win10 machine joined to Azure AD - can I create a share on that Win10 machine and other Azure AD users can use their creds to access the share on my Windows 10 machine?
yes, exactly this. That way with Azure I can set a password change policy, and when they do change their password, they can still access the share on the Windows 10 machine.
That part would work, it's just that they'd need to use different creds always.
-
@scottalanmiller said in domain controller in the cloud for small office?:
I'm often a proponent of lowering school IT budgets, the overspend that they do is absurd - to the point that the extra money often causes more issues that it solves.
Have you ever heard or seen schools using Ubiquiti and PBX instead of Cisco to help with lowering the cost?
-
@black3dynamite said in domain controller in the cloud for small office?:
@scottalanmiller said in domain controller in the cloud for small office?:
I'm often a proponent of lowering school IT budgets, the overspend that they do is absurd - to the point that the extra money often causes more issues that it solves.
Have you ever heard or seen schools using Ubiquiti and PBX instead of Cisco to help with lowering the cost?
Have I, yes. Because I've worked in schools and done that. Very few do, though, and I consider it outright corruption. Funneling money to consultancies and big businesses using schools as ways to force tax payers to prop up big companies even when their products have no value to the schools.
-
@dashrender said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
Good question, let me try that. I'll be back in an hour or so.
Ug conference call, can't test this yet.
-
@dashrender said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
Good question, let me try that. I'll be back in an hour or so.
Sadly, I could find no way in about 10 mins of googling, etc to add AzureAD credentials to a share/file permisssions to make this work.
As Scott said earlier, you'll have to create local a local account, then use that cred to make the sharing work.
-
@dashrender said in domain controller in the cloud for small office?:
@dashrender said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
Good question, let me try that. I'll be back in an hour or so.
Sadly, I could find no way in about 10 mins of googling, etc to add AzureAD credentials to a share/file permisssions to make this work.
As Scott said earlier, you'll have to create local a local account, then use that cred to make the sharing work.
You can't, I already said that you can't. We spoke to MS about it a few weeks ago.
-
@dashrender said in domain controller in the cloud for small office?:
Sadly, I could find no way in about 10 mins of googling, etc to add AzureAD credentials to a share/file permisssions to make this work.
Thanks for giving it a rip.
-
@scottalanmiller said in domain controller in the cloud for small office?:
@dashrender said in domain controller in the cloud for small office?:
@dashrender said in domain controller in the cloud for small office?:
@mike-davis said in domain controller in the cloud for small office?:
At this point I don't know if they have any Windows 7 clients, so it may be a moot point.
I do know that they have QuickBooks - I know - I know. So I have to share QuickBooks from one computer.
Has any one tested Azure AD to share a folder from one computer to another? Does it integrate all the accounts in AD, or only the one you set up on that particular Win 10 box?
Good question, let me try that. I'll be back in an hour or so.
Sadly, I could find no way in about 10 mins of googling, etc to add AzureAD credentials to a share/file permisssions to make this work.
As Scott said earlier, you'll have to create local a local account, then use that cred to make the sharing work.
You can't, I already said that you can't. We spoke to MS about it a few weeks ago.
Yep you did, but you weren't verbose about it, thanks for the additional information.
-
It's pretty dumb, I think, that they make their own authentication work so badly. Just encourages competition.
-
I spent a lot of time going in a circle on this earlier in the year. Basically, Scott was right... Azure AD doesnt do what you want. I spent a lot of time showing Scott he was wrong, spinning up Azure Domain Services, but it ended up Scott was still right and it was just a managed cloud instance of AD. For small business starting at $90 didnt make sense.
-
There's a difference between Azure AD and running a DC on a VPS.
Azure AD doesn't use Kerberos or NTLM and is meant to work with web-based services such as O365 and salesforce using SSO.
WinServer AD isn't meant to work with online services, although there are ways and through federation.
They are different and it's important to know where they fit in.
