At 10:00 AM on Sunday, January 20, 2013, Keith Mayer posted Part 20 of 31 in the 31 Days of Servers in the Cloud Blog Series. Below is a small excerpt from his blog.
Extending an on-premise Windows Server Active Directory ( AD ) infrastructure into the cloud is an important topic to consider when planning the migration or implementation of cloud-based applications. Many existing applications require Active Directory for authentication and identity management. When migrating applications to the cloud, having a locally accessible Active Directory is an important factor to ensuring that AD authentication is fast and reliable.
Great point! Extending an on-premise Active Directory into the cloud can also provide a cost-effective option for protecting Active Directory in DR scenarios. In the event of a physical disaster or outage at your primary data center location, a VM running Active Directory in the Windows Azure cloud can provide uninterrupted access to Active Directory for cloud-based applications and other on-premise AD-integrated applications.
When planning for Active Directory in the Cloud with our Windows Azure cloud platform, there’s two options available:
You can read more about both Active Directory cloud options at:
In this article, we’ll be stepping through the components involved with the second option listed above to extend an on-premise Active Directory infrastructure using Windows Server Active Directory on Windows Azure VMs.
In future articles, I’ll cover the configuration of Windows Azure Active Directory for providing authentication and identity management for “Cloud-first” applications.
In the scenario described in this article, we’ll be connecting an existing on-premise network with a virtual network in the Windows Azure cloud via a secure Site-to-Site IPsec VPN tunnel. Once the tunnel is connected, the Windows Azure Virtual Network can be treated much like any another subnet on a Wide Area Network (WAN) when provisioning network services that will run in a Windows Azure Virtual Machine.
Scenario: Extending Active Directory into the Cloud
The following is recommended to follow along with this article:
To complete the scenario described in this article for extending Windows Server Active Directory into the cloud, we will be using the following exercises:
To get the full article, please read it here: http://blogs.technet.com/b/keithmayer/archive/2013/01/20/step-by-step-extending-on-premise-active-directory-to-the-cloud-with-windows-azure-31-days-of-servers-in-the-cloud-part-20-of-31.aspx.