AADS

[CAWJames]

Morning all,

 

Anyone run Azure AD Services? Can anyone give me an indication of cost for doing this?

 

I want to get LDAPS and eventually NPS/RADIUS out of AD, and in these strange times I have time on my hands to battle all these things that should be OOTB.

 

Thanks

 

James

[SYNACK]

I have been looking into this recently to try and rationalize our papercut setup after taking over a school.

 

Unfourtunatly it is not just AAD DS, that gets you a nice LDAP server but its still locked away in the cloud. In order for anything local to access it you need to set up a VPN route from Azure to your local network which is also billed by public IP and by bandwidth used. If running radius you'll need another server running your choice of software to talk back to it. You can run this in azure as a VM but that costs more and you still need the VPN so local stuff can access it.

 

This is a headache and so there are third parties that have worked around this particular headache for radius, I don't think they even require a password reset.

 

https://www.securew2.com/blog/azure-ad-802-1x/

 

https://jumpcloud.com/product/cloud-radius

 

Given how our liscencing is funded down here I am actually leaning towards spinning up a whole new local AD with a dump of users from AAD and turning on AD sync to get local services back. Even with AAD DS users need to reset their passwords after it is setup for them to be usable by AAD DS.

 

The cloud push at all costs is responsible for a lot of issues and unnecessary spending when a hybrid system remains superior in many regards. Especially cost.

 

Absolute minimum for use was looking like 100 gbp /month for the lowest tier of everything assuming our traffic was not too high.