Adaxes 2023 Azure AD Management Feature

Question

We have a hybrid environment with On-Prem AD and Azure AD. We currently have our On-Prem AD registered (See screenshot). For us to take advantage of the Azure AD management feature in version 2023, do we need register Azure AD domain as well as our On-Prem AD at the same time?

Answer 1

Hello,

Yes, that is correct. You need to follow the steps for registering a managed domain and select the Cloud domain option on the corresponding step of the wizard. The following articles should be helpful:

• Register a managed domain
• Register Adaxes as an app in Microsoft Azure

Comments

Thank you. If we have 2 registered domains, on-prem Active Directory and Azure AD (cloud), will that affect our Managed Microsoft 365 Tenant Cloud Service in any way? See screenshot

---

Hello,

If you just register an Azure AD domain and your Microsoft 365 tenant is associated with users in the domain, it should not have any effect on Azure AD users themselves.

---

How does this affect licensing, if you add both your on-prem domain and the correspong azure AD domain ( which does have mostly the same users)

---

Hello,

Adaxes is still licensed based on the number of enabled and not expired user accounts in all the managed domains. This includes both on-premises AD and Azure AD users. If you register an Azure AD domain and a synchronized on-premises AD domain in Adaxes, synchronized users will only be counted once towards the license limit.

---

Yes, make sure to know how many accounts are in Azure AD. We went over our license limit after adding AAD. Then we had to remove AAD until we are able to upgrade our license. Now we are having issues with our scheduled tasks and scripts. Not sure if the issue is related to the changes but it was working fine before we added and removed AAD domain.

---

Hello,

What do you mean by issues with our scheduled tasks and scripts? There were quite a lot of changes that require adjusting scripts. If you face any errors/warnings, please, post here or send us screenshots.

---

Do external users who are invited to Azure AD as guests count towards the Adaxes license count?

---

Hello,

Yes, all enabled and not expired user accounts in all the managed domains count for license validation.

---

Hi, How can we exclude Azure AD guest accounts or users in an Azure AD user group?

---

Hello,

Have a look at the following help article: https://www.adaxes.com/help/AddUsersToUnmanagedList.

---

We have an Adaxes instance that is currently connected to our AD Domain with Microsoft 365 services included.

We have several thousand accounts excluded in our Active Directory that have been added to the unmanaged user list.

If we connect our Entra (Azure) tenant to Adaxes, will those accounts on the unmanaged list still be unmanaged?

Also, how can we exclude large groups of cloud-only accounts? The scripts appear to be geared towards the distinguished name in AD, which would not apply for cloud-only.

thanks

---

Hello,

If we connect our Entra (Azure) tenant to Adaxes, will those accounts on the unmanaged list still be unmanaged?

Yes, sure, registering an Entra domain in Adaxes does not influence the unmanaged list.

how can we exclude large groups of cloud-only accounts?

You can use scripts from our repository: https://www.adaxes.com/script-repository.htm?cat=32.

The scripts appear to be geared towards the distinguished name in AD, which would not apply for cloud-only.

That is not correct. In Adaxes, even cloud-only objects from Entra ID have distinguished names.

---

Thank You for your assistance.

I have already read these scripts. How would you identify the distinguished name of a cloud only object?

---

Hello,

For information on how to get an object DN, have a look at the following article: https://adaxes.com/sdk/HowDoI.GetDnOfObject. It works the same for both Entra ID and on-premises AD objects.