Prerequisites
-
A Microsoft account with at least one valid, active Microsoft Azure subscription.
-
At least one writable replica domain controller installed in your Microsoft Azure account.
For more information on how to install a replica domain controller, see Install a Replica Active Directory Domain Controller in Windows Azure Virtual Networks.
To deploy the Active Roles Administration Service on an Azure VM
-
Create a virtual machine (VM) based on a supported Windows Server image published in Microsoft Azure. For the list of Windows Server versions supported by Active Roles, see System requirements in the Active Roles Release Notes.
When creating the VM, on the Virtual machine configuration page, select the cloud service that you created for the SQL Server virtual machine in Deploying Microsoft SQL Server on an Azure VM. This will automatically select the correct virtual network as this cloud service is already used to host the SQL Server virtual machine.
-
Connect the newly-created VM to your Active Directory domain.
-
Connect to the VM using Remote Desktop, and run the Active Roles Setup wizard to install the Active Roles Administration Service. For more information, see Deploying the Administration Service.
When prompted for the service account, specify the appropriate user account defined in your Active Directory domain. Ensure that this user account is a member of the Administrators local group on the VM where you are installing the Administration Service. For example, this could be a domain user account that belongs to the Domain Admins group of your Active Directory domain.
When prompted for SQL Server, specify the name of the SQL Server you deployed in Deploying Microsoft SQL Server on an Azure VM.
-
To configure the Windows Firewall, run the following Windows PowerShell command on the VM where you installed the Active Roles Administration Service:
$allowedClientSubnets = @('10.0.0.0/8', '172.16.0.0/12', '192.168.0.0/16'); New-NetFirewallRule -DisplayName "Active Roles" -Direction Inbound ` -Action Allow -Service 'aradminsvc' -RemoteAddress $allowedClientSubnets ` -Enabled True