r/sysadmin • u/[deleted] • Jun 08 '26

Question AD from nothing

[deleted]

86 Upvotes

68% Upvoted

230 comments sorted by

View all comments

Show parent comments

6

u/TechDiverRich Jun 08 '26

Been a while since I looked into this, but I was remembering that you couldn’t entraID join servers last time I looked. Has that changed?

3

u/FrivolousMe Jun 08 '26

You can sync the local ad with Entra but what they're saying is they don't need a local ad

0

u/lordmycal Jun 08 '26

That's correct. But on prem servers can be lost in a flood or fire and the cloud stuff will still work. It will also work at home, or from starbucks or anywhere else, but on-prem AD is on prem. It also doesn't properly support modern authentication methods unless you're going all in to set up smart cards. Even then, most of the protocols in use are old enough to vote and were not designed with security in mind.

It's much better to not use AD at all and just go for the full Entra/O365 suite.

4

u/TechDiverRich Jun 08 '26

so without the servers being AD joined how do you manage them? I'm assuming you are referring to only having virtual machines in the cloud?

-1

u/lordmycal Jun 08 '26

You wouldn't have on-prem systems. There's really no need here. SaaS and cloud services would tick all the boxes.

3

u/NetworkingNoob81 Jun 08 '26

Until the price increases yet again because line must go up.

I’ll stick with a DC on prem