How Can I Log Into Windows Server 2025 Using Entra ID?
Asked by
CloudyAdventurer42
I'm currently working in a fully cloud-based environment with no on-premise servers, and all our laptops are Windows devices managed via Intune with Entra ID. However, as we plan for some upcoming projects, we need to integrate on-premise servers into our infrastructure for better ROI. I'm looking for options to easily log into Windows Server 2025 using Entra ID. Ideally, I want to simply join the servers to Entra and manage everything through Intune, without dealing with additional complexities like Azure ADDS or ExpressRoute. I've heard about Azure Arc, but I'm not sure if it fits my needs. What are my options for efficiently managing these application servers?
Answers
If your projects don’t require user authentication to the servers, and only for the application workloads, you can use Entra for SSO. This is more about backend management for your OS, so keep that in mind!
Reply to this answer
If you're considering Azure Arc, pairing it with Windows Admin Center could be your best bet. It streamlines administration, but check into the costs involved.
SkepticalTechie34: But isn't Azure Arc mostly for Azure environments? What if my servers are not in Azure?
Reply to this answer
You can directly join a Windows Server 2025 to Entra by going into the settings app, navigating to 'Accounts,' and selecting 'Work or school' to click 'Join to Entra AD.' It's pretty straightforward!
CleverIdeaMan20: I've seen info suggesting this only works if the server is a VM in Azure, though. Can anyone confirm if that's true?
CuriousUser88: I thought joining to Entra AD wasn't supported for physical servers. Is it really that simple?
Reply to this answer
Azure Arc is definitely a viable option! It allows RDP tunneling through an internal proxy, making management easier for on-prem servers.
Reply to this answer
Intune isn’t really designed for managing servers. For smaller setups, using local accounts and managing with Ansible could be more effective. If you have 10+ servers, you might want to consider implementing on-prem AD for easier management.
Reply to this answer
Add your answer
Answers are reviewed before publication.
SimplerSolutions101: Exactly! Since the backend doesn’t need user authentication directly, running everything on Entra should work just fine.