How to Connect Microsoft Entra ID to a Windows Server Domain
Question details
The user needs to integrate a Windows Server 2019 domain with Microsoft Entra ID to enable Microsoft 365 sign-ins on shared computers.
- Product
- Microsoft Entra ID
- Device & OS
- Windows Server 2019
- Scenario
- Setting up directory synchronization to support shared computer access and Microsoft 365 authentication.
- Observed behavior
- Evaluating the correct design and requirements for domain integration, licensing, and identity synchronization across shared devices.
Before attempting directory integration, ensure you have Global Administrator privileges in your Microsoft Entra ID tenant and Enterprise Admin rights on your on-premises Windows Server domain.
Use Microsoft Entra Connect for Directory Synchronization
The standard method for linking an on-premises Windows Server domain with Microsoft Entra ID is by installing and configuring Microsoft Entra Connect.
Microsoft Entra Connect acts as the bridge between your local Windows Server Active Directory and Microsoft Entra ID. It allows you to synchronize users, groups, and password hashes so that your employees can use a single identity to access Microsoft 365 applications on shared computers.
Navigate to the Microsoft Download Center on a dedicated Windows Server 2019 machine and download the Microsoft Entra Connect installer.
Launch the installer, accept the license terms, and click Continue to begin the configuration.
Select 'Use express settings' if you have a single-forest Active Directory topology, or choose 'Customize' to configure specific sync options, domain filtering, and sign-in methods.
Enter your Microsoft Entra ID Global Administrator credentials when prompted, followed by your on-premises Active Directory Enterprise Admin credentials, then click Install to initiate the initial synchronization.
Consult the Azure Community Support Forum for Complex Scenarios
If your environment involves complex licensing, multiple domains, or highly specific shared-device requirements, consulting Microsoft experts is recommended.
Deploy WPS Office as a Lightweight Alternative for Shared Computers
While you configure identity integration between Windows Server and Microsoft Entra ID, consider using WPS Office on your shared workstations. It provides an enterprise-ready, resource-friendly productivity suite without the complex licensing activation hurdles of Microsoft 365 on shared devices.
- 1. Download the Installer: Visit the official WPS Office website and download the enterprise or free installation package.
- 2. Deploy to Shared Computers: Use your Windows Server Group Policy or deployment tools to distribute WPS Office across your shared workstations.
- 3. Start Creating: Allow users to open, edit, and save their documents instantly without complex shared-activation logins.
Frequently Asked Questions
Does Microsoft Entra ID replace my on-premises Windows Server Domain?
No, it typically extends it. By using Microsoft Entra Connect, you synchronize your local Windows Server Active Directory with Microsoft Entra ID, allowing both environments to function together seamlessly.
What is required to allow multiple users to use Microsoft 365 on a shared computer?
Aside from synchronizing user identities via Microsoft Entra ID, you must deploy the Microsoft 365 Apps using Shared Computer Activation. This prevents the installation from counting against a user's device limit and requires them to have a valid license upon login.
Can I sync local Active Directory passwords to Microsoft Entra ID?
Yes. When configuring Microsoft Entra Connect, you can enable Password Hash Synchronization (PHS). This securely syncs a hashed version of users' on-premises passwords to Microsoft Entra ID, enabling single sign-on capabilities.
