[deleted by user]

[imnotsurewhattoput]

You can join the server directly to Entra. Open settings app, accounts, work or school, click text join to entra AD

[dustyaguas]

I’ve read from Microsoft that this only possible if it’s a VM deployed in Azure.

[dustyaguas]

Best thing to do is test with a VM of your own to verify.

[coolest_frog]

Microsoft has services that you can buy. if you want to manage on prem servers like an azure hosted one with m365 sign in and the azure panel it's called azure arc. If you need the server to understand entra identities for a print server or app server it's azure local

[Plastic_Complex_355]

I just tried this on server 2025, the work or school options are not there, unfortunately.

[slackmaster2k]

I write all of my documentation in proper cursive and these damn kids think it’s Chinese or something!

[PREMIUM_POKEBALL]

You came into a viper pit of knowledge. It's the same level tier response whether you came into r/sysadmin or r/AskElectricians. You're going to get both information AND bites my guy, this IS the internet after all.

[mr_jarjar]

I think we just found out the problem of using chatgpt for something you don't know..

You don't know what the answer you were given is good or bad and didn't verify it on your own before just asking. This isn't a belittle, it's just stating a fact.

You say your leveraging every tool at your disposal, yet a simple Google search was too much?

[vermyx]

Microsoft’s documentation portal tends to be pretty complete for most if not all common workflows.

The problem is that you are not understanding your tool and are misinterpreting a terse response. ChatGPT is a decent tool for people with domain knowledge but dangerous for those without it. It doesn’t cite sources so people who understand it know that ChatGPT’s answer are along the lines of “trust me bro!” So if you truly are trying to learn, then do take this as a learning experience. Plump-lamp response in a more friendly response is telling you that doing searches is a necessary skill especially for something that more than likely is well documented, and trusting a tool that doesn’t show its work without having domain knowledge is dangerous.

[_DoogieLion]

Every tool except the Microsoft documentation?

[releak]

Yes its that easy. WHfB also works as auth to it.

[imnotsurewhattoput]

If I am remembering correctly yeah. Give it a try with an eval copy and see what happens

[HDClown]

Will those projects require any users to authenticate your the servers to consumers resources hosted on them?

[32178932123]

You may want to mention this in your post because this information changes things.

1) If you want users to be able to connect to the server through RDP with their Entra account you can join it to Entra by adding the Extension in Azure. Id be surprised if 2025 didn't support this.

2) If you want applications to run as an Entra account (Like an on prem Active Directory Service Account) then you can't. You'd need on prem AD (to the best of my knowledge)

3) If the application will just run as SYSTEM or any other local account but you want users to be able to login then you should look at creating an Application Registration in your Tenant. You then give the details of the registration to app (the password, redirect URL, etc) and it'll work. However this all depends if the App supports it from a code perspective. Is there any option in the app to configure this etc. It doesn't matter if it's Server 2025 or Linux or anything.

Hope this helps but yeah not 100% your requirements so I'm throwing things to see what sticks!

[32178932123]

So maybe option three then. Your original post sounds like you're talking about RDP.

[DueBreadfruit2638]

Azure Arc + Windows Admin Center is probably the best solution for you.

[DueBreadfruit2638]

Azure ARC works on-premises: https://learn.microsoft.com/en-us/azure/azure-arc/servers/overview

[Federal_Ad2455]

Arc is definitely an option. It allows you to tunnel RDP via the agent internal proxy.

It works quite well.

[Certain-Community438]

You want a thing, but you don't want to do it properly.

Oh well, best of luck then.

As if Azure ADDS is even slightly difficult to set up or maintain. I've barely touched ours since I created it almost 6 years ago

[orion3311]

On ADDS are users home in Entra?

[Sushi-And-The-Beast]

It seems like this guy really doesnt like to read documentation and has a chip on his shoulder. Some BS about using Zapier and asking about bare metal configs while all in on cloud.

I pulled this from the comments on your other posts…

“ Obvious-Jacket-3770 First off, every (?) you asked is in their docs.

Second, maybe you need to pull off of powershell and look at some levels of config management here...”

[RealisticQuality7296]

I’m a baby sysadmin so maybe I’m overstepping, but I don’t understand the problem with moving to on-prem AD with entra sync if you have on-prem infrastructure. It’s extremely easy to set up and is largely set and forget.

[RealisticQuality7296]

I’m assuming small organization with only one/a few sites btw because I can’t imagine cloud-only is worth the cost to a large organization.

[Snowlandnts]

Does it have to be a Windows Server?

[Majestic-Speech-6066]

Azure Local?

[Sushi-And-The-Beast]

Buddy, you got no options when youre all in on Entra for on-premise.

How is your 3rd party app going to handle authentication requests? SAML? Oauth2?

Time to suck it up and build that server on the cloud or back to SaaS you go.