Cloud / Azure based Domain Controller - Almost serverless?

[gsk]

Hi All,

 

I'm trying to get my head around moving DCs to the cloud but can't find what I need to get so that I can assess costs. I would rather move sites wholesale to AAD rather than mess about with hybrid versions. What I'd like to do is:

 

*DHCP, DNS and local file cache on a 4-bay NAS joined to AAD.

*Join devices to the AAD domain and be able to set policies there that the devices can access from any location

*Policy requirements are basic and would consist of: Print management, per device or per user; set logon screen options; set drive maps; add shortcuts as in local GPP; transfer files or registry items as in GPP;

*program/app deployment - we currently use PDQ Deploy which is a breeze but have seen reports that this won't work with AAD only machines and won't even connect using a common local admin credential.

*users log in to any device using their O365 credentials from anywhere and get a regular domain-joined machine experience.

 

What do I need from MS to make this work?

How much is it likely to cost?

Can the extra licences be added on to the OVS-ES agreement?

 

Thanks,

[Davit2005]

My understanding is that to have onsite servers joined to a Azure domain you'd need to have Azure AD Directory Services.

 

Checkout the following

 

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/overview#:~:text=Azure%20Active%20Directory%20Domain%20Services%20(AD%20DS)%20provides%20managed%20domain,(DCs)%20in%20the%20cloud.