Active Roles Configuration steps to manage Hybrid AD objects
To configure Active Roles to manage Hybrid AD objects, perform the following tasks:
- Create an Azure AD tenant.
- Create the Azure AD application.
- Provide the administrator consent for the Azure AD application.
- Enforce the Built-in Policy - Azure - Default Rules to Generate Properties Policy Object to the on-premises Active Directory containers, which are synchronized to Azure AD.
NOTE:
-
After an upgrade the edsvaAzureOffice365Enabled is not available for viewing or editing from Organizational Unit | Advanced Properties or through the management shell command-let, however the organizational unit container continues to be an Azure enabled container as the azure policy is already applied.
For more information on Azure custom policies, see Changes to Azure O365 Policies in Active Roles after 7.4.1.
Active Roles on Windows Azure VM
Active Roles on Windows Azure VM
This section outlines the recommended steps for deploying Active Roles in the Windows Azure Infrastructure Services environment. After you complete these steps, you have the following services deployed in Windows Azure using Windows Azure virtual machines:
- SQL Server 2012 or later to host the Active Roles database
- Active Roles Administration Service
- Active Roles Web Interface
Step 1. Prerequisites
This guide assumes that you already have the following prerequisites:
Step 2. Deploy Microsoft SQL Server 2012
Perform the following tasks to deploy SQL Server:
-
Create a virtual machine based on an SQL Server image published in Windows Azure.
When creating the virtual machine, on the Virtual machine configuration page, select the Create a new cloud service option and choose the Virtual Network used by your replica domain controller in Windows Azure.
For more information on how to deploy an SQL Server in Microsoft Azure, see Create SQL Server on a Windows virtual machine in the Azure portal in the Microsoft Azure documentation.
- Join the SQL Server virtual machine to your Active Directory domain.
- Using SQL Server Management Studio, grant the sysadmin fixed server role to the domain user account that will be used as the service account for the Active Roles Administration Service.
- Configure Windows Firewall to allow connections to TCP Port 1433 from computers in your Virtual Network.
Because SQL Server will be accessed from within the Virtual Network, you do not need to create public endpoints in Windows Azure.
