Azure Active Directory Domain Services Reviews & Product Details

I like Azure Active Directory Domain Services for its Ease of Use and Ease of Implementation, strong Customer Support, frequent Frequency of Use for legacy workloads, sufficient Number of Features, and seamless Ease of Integration with Azure AD and applications. Review collected by and hosted on G2.com.

Admin controls feel limited, there’s no support for schema extensions, and the sync is one-way. Combined with the costs, it ends up feeling restrictive for more advanced or complex Active Directory needs. Review collected by and hosted on G2.com.

The greatest advantage is the deployment of domain services (LDAP, Kerberos, NTLM) without having to patch, secure, or back up the individual domain controllers. Microsoft takes care of the uptime and the deployment of the two nodes necessary for high availability. Review collected by and hosted on G2.com.

It's frustrating that, despite being a domain service, you don't have Domain Admin or Enterprise Admin permissions. You are limited to the "AAD DC Administrators" group. This means that many advanced configuration tasks or software installations that require deep access to the directory simply cannot be performed. Review collected by and hosted on G2.com.

What I appreciate most about Azure Active Directory Domain Services is its seamless integration with Azure AD. It is a managed service that supports legacy applications, making it easier to maintain compatibility. The simplified hybrid setup is another advantage, along with high availability and scalability. Additionally, I find its cost efficiency to be a significant benefit. Review collected by and hosted on G2.com.

What I find challenging about AAD DS is the limited administrative control it offers, especially when compared to traditional on-premises Active Directory. There are noticeable feature gaps, and the lack of support for schema extensions can be restrictive. Managing hybrid scenarios can also become quite complex. Additionally, cost is a significant factor to consider, and the options for backup and restore are limited. Review collected by and hosted on G2.com.

I love that I no longer have to maintain, secure, or stay awake at night worrying about a traditional domain controller. Having that entire layer abstracted away—and not having to think about patching, replication, or backups anymore—is phenomenal. The implementation is quick and easy, which is surprising given that this is such a cornerstone of enterprise IT. We were able to lift and shift our existing Azure AD identities, and it also let us move applications that still required a more traditional AD instance without all the usual deployment overhead. That level of integration, along with those features, is rare in a specialized product. Review collected by and hosted on G2.com.

While I appreciate the reduced operational overhead, it’s worth noting that administrative control is also reduced compared with traditional Active Directory instances. I can’t perform full domain admin operations, or even make schema modifications, which limits some more advanced use cases (I only ran into one example, but it still mattered). In addition, because Microsoft manages the domain controllers, replication and configuration changes can take time to propagate, and I no longer control when those changes are forced. Review collected by and hosted on G2.com.

Most helpful when you want the benefits of traditional Active Directory domain join, group policy, and LDAP/Kerberos authentication without having to set up and maintain domain controllers yourself. Review collected by and hosted on G2.com.

No forest or external domain trusts — you’re limited to the single managed domain Microsoft provides.

No AD Certificate Services, no SYSVOL replication scripting, and some advanced Group Policy options are unavailable.

You can’t control replication topology, FSMO roles (they’re fixed), or install additional domain controllers.

Not Fully Replaceable for On-Prem AD Review collected by and hosted on G2.com.

Our domain controller is hosted on Azure, while our Active Directory Connectors are located on-premises. If any issues arise, we are able to set up a new Active Directory Connector within 30 minutes. Review collected by and hosted on G2.com.

The cost of credits is quite high, and I believe it should be lower. Review collected by and hosted on G2.com.

Enrollment with Intune, Windows Defender Review collected by and hosted on G2.com.

support contact problem, very slow delays to resolve issues, sync problem with Intune Review collected by and hosted on G2.com.

centralizing identity management for users, devices and groups.

single sign on SSO

Hybrid integration

MFA for advanced security

integration with microsoft defender for identity and microsoft entra

real time sign in logs

selfe service password reset and group management.

user friendly Review collected by and hosted on G2.com.

the complexity of their licensing structure

configuring hybrid identity, custom SSO, and Conditional Access can be difficult without expertise.

debugging SSO issues csan be complicated

integration with none microsoft tools can be a headache

sync delays

not so easy to implement Review collected by and hosted on G2.com.

Better then AWS, its fimilular and brings back the memories of AD Review collected by and hosted on G2.com.

Dont really have a choice any more between aws Review collected by and hosted on G2.com.

Maintains all the required and important information of a Company Review collected by and hosted on G2.com.

Nothing to Dislike if you once learns how to manage it. Review collected by and hosted on G2.com.