Failed to join domain through Azure's VPN

Question

HI there,
I take advantage of Azure as our Active Directory DR site. I configured a VPN between our office and Azure.
I deployed a Windows Server 2012 R2 vm in Azure, installed ADDS on it and joined this vm to our existing domain in our office . When I promoted this vm to a domain controller, the prerequisite check I always got the following error message.
Verification of outbound replication failed. Error reading the options property of the NTDS settings. Unknown error (0x8000500c)
It was ok to join our existing domain through VPN, but it always stopped at this error message and failed to be promoted as a domain controller. Is there anything I should do to the VPN?
Douglas

Answer 1

Hi,
Firstly, please make sure that you have registered the DNS Server for your on-premise domain in Azure virtual network.
Azure OS drives have write caching enabled. It is recommended to add a second drive which will be a ‘Data Disk’ and the Active Directory NTDS database and SYSVOL should be placed on the new drive
which will have write caching disabled.
You can attach an empty disk for the Azure VM, then RDP into the VM and
create a new partition on the attached data disk and format this partition as a new
F: NTFS volume for NTDS DIT database, log and SYSVOL folder locations.
After that, you can install Active Directory Domain Services and promote this server to a Replica Domain Controller in an existing Active Directory domain. For more detailed information, please
refer to the link below:
Step-by-Step:
Extending On-Premise Active Directory to the Cloud with Windows Azure - 31 Days of Servers in the Cloud - Part 20 of 31
Bets regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]