Join Azure VM to Azure AD

Azure AD isn't your "regular" AD. You're not able to join computers to it. What you CAN do, is the following: Set up your own domain controllers (these can also run on Azure), and use Azure Dirsync (which is a service you install on a VM) to sync user objects between your "regular" AD and Azure AD. That way, you have a normal AD forest you can use for computer joins and such, but also enjoy the benefits of being able to do single-sign on to Azure websites, Office365 etc using the replicated accounts in Azure AD. There is a very good document describing this sort of architecture (although it's made for Office365 it goes for Azure as well, since the Azure AD instance is the same), which can be found here. Well worth the read: Deploying Office 365 Single Sign-On using Windows Azure


Check out the (Still in preview) Azure Active Directory Domain Services. with this feature you will be able to join an Azure VM to your Azure AD Domain. you will also be able to use GPOs for computer and users.


I was able to do this with Azure VMs (Windows Server 2012 R2).

It requires Azure AD Domain Services. If you're setting group-based permissions (e.g. for folder or RDP access) you need to use a security group (distribution lists and O365 groups, including built-in groups, will not work).

You may need to configure the DNS servers if they're not set up correctly.

You need to have a local VM admin-level account and an Azure AD admin-level account.

You just change the domain under my computer as you would when joining it to a regular domain (you will need to enter the Azure AD admin credentials).

Note: Don't forget that you also need to add RDP access for the users/groups before they will be able to RDP into the VM with their Azure Accounts.

You don't need a separate domain controller or DirSync.