Does Windows 365 Enterprise Require Active Directory?
Question details
The user needs to know if local Active Directory is a mandatory requirement for deploying Windows 365 Enterprise cloud PCs.
- Product
- Windows 365 Enterprise
- Device & OS
- not provided
- Scenario
- Planning network and directory services for a new Windows 365 Enterprise deployment.
- Observed behavior
- A clear understanding of supported identity configurations, such as Microsoft Entra ID and Active Directory Domain Services (AD DS), is required to allow users to properly authenticate and connect.
Ensure you have administrative access to your Microsoft 365 admin center and Microsoft Intune tenant before reviewing or modifying your directory architecture.
Configure Identity and Domain Architecture for Windows 365
Determine whether to use an on-premises Active Directory setup or a cloud-hosted Microsoft Entra ID configuration for your Cloud PCs.
Historically, Windows 365 Enterprise required a local Active Directory (AD) or a hybrid setup to provide a domain for Cloud PCs to join. However, Microsoft now natively supports Microsoft Entra ID (formerly Azure AD) joined Cloud PCs, eliminating the strict reliance on local domain controllers for many organizations.
Choosing the right architecture depends on your current infrastructure. If you have legacy apps requiring local domain authentication, a hybrid setup using Active Directory Domain Services (AD DS) is necessary. Otherwise, a pure cloud deployment using Microsoft Entra ID is recommended.
Check your existing environment to determine if your organization uses an on-premises Active Directory, a Hybrid setup, or strictly Microsoft Entra ID (cloud-only) for user management.
If you lack an on-premises domain controller, navigate to the Microsoft Intune admin center and ensure your tenant is configured to allow Microsoft Entra ID join for Windows 365 provisioning policies.
In Microsoft Intune, create an Azure network connection (ANC) if you are routing traffic through a hybrid AD setup. If deploying pure Entra ID Cloud PCs without custom routing, you can utilize Microsoft-hosted networks instead.
Discover WPS Office as a Lightweight Alternative for Your Workloads
While deploying and managing Windows 365 Enterprise environments can be complex, choosing the right productivity suite doesn't have to be. WPS Office provides a free, lightweight, and highly compatible Office alternative that runs smoothly on any cloud PC or local device.
- 1. Download the installer: Visit the official WPS Office website and download the free installer to your local device or Windows 365 Cloud PC.
- 2. Install the software: Run the installation file and follow the quick setup wizard to install the suite.
- 3. Sign in and start working: Open WPS Office, sign in with your account, and instantly begin working on your documents with full Microsoft format compatibility.
Frequently Asked Questions
Can I deploy Windows 365 Business without Active Directory?
Yes. Windows 365 Business is designed for smaller organizations and does not require an Azure subscription or an Active Directory domain setup. It relies entirely on Microsoft Entra ID for simple user provisioning.
What is the difference between Microsoft Entra ID Join and Hybrid Entra ID Join for Cloud PCs?
Microsoft Entra ID Join allows your Cloud PCs to join your cloud directory directly without needing local domain controllers. Hybrid Entra ID Join requires connecting the Cloud PCs to both an on-premises Active Directory and Microsoft Entra ID.
How do users authenticate to a Windows 365 Cloud PC?
Users authenticate to their Cloud PCs using their standard Microsoft 365 or Microsoft Entra ID credentials. Security measures like Multi-Factor Authentication (MFA) can be enforced through Conditional Access policies.
Do I need an Azure Network Connection (ANC) for Entra ID joined Cloud PCs?
If you use a Microsoft-hosted network for an Entra ID joined Cloud PC, an Azure Network Connection is not required. You only need an ANC if you are bringing your own virtual network (BYON) or utilizing a hybrid domain setup.
