If LAN is legacy, what is the UN-legacy...?
-
Quick Recap:
Active Directory is the "old LAN way" with LAN or LAN-like dependencies.
Azure AD is a similar system without a LAN dependencies, server dependencies, etc. -
@Dashrender Can't you use those reverse engineered drivers? I think Tricerat makes them.
-
@wirestyle22 said:
@Dashrender Can't you use those reverse engineered drivers? I think Tricerat makes them.
Drivers for what?
-
@Dashrender Printers being your bane using your example. Sorry I got lunch I've been away
-
@wirestyle22 said:
@Dashrender Printers being your bane using your example
LOL, I'd quote who you are responding to
That was many posts ago. -
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
-
@wirestyle22 said:
@Dashrender Printers being your bane using your example. Sorry I got lunch I've been away
It's not about drives, it's about deploying printers.
I haven't looked at AAD enough yet to look at printers - But I'm guessing since AAD doesn't have Group Policy (or at least I don't think it does) you can't use AAD to deploy printers. So now printers all end up like stand alone devices from 25 years ago or more and manual driver deployment or a third party deployment solution.
-
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
-
@scottalanmiller said:
@wirestyle22 said:
@Dashrender Printers being your bane using your example
LOL, I'd quote who you are responding to
That was many posts ago. sorry! -
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
ADFS already merges AD and Azure AD if you want to do that. We do not, ADFS ads a lot of problems. It can be cool, but it is a pain too. Don't do it casually.
My guess is that they are going to expand Azure AD to promote Azure and Office 365 services because that is going to be where the money is. But it is just a guess.
My hope is that MS gets this all set up and get Mac OSX and Linux to authenticate to it. Even if only CentOS/RHEL, Linux Mint, Ubuntu, Zorin and OpenSuse get it working, that would be amazing.
-
@Dashrender said:
@wirestyle22 said:
@Dashrender Printers being your bane using your example. Sorry I got lunch I've been away
It's not about drives, it's about deploying printers.
I haven't looked at AAD enough yet to look at printers - But I'm guessing since AAD doesn't have Group Policy (or at least I don't think it does) you can't use AAD to deploy printers. So now printers all end up like stand alone devices from 25 years ago or more and manual driver deployment or a third party deployment solution.
I do not believe that it does, it does not "include" it, but you might be able to get it to work otherwise.
However GP requires a legacy file server structure, so we need to see that evolve into something more modern, too.
Right now, the answer for that is dropping AD and GPO and moving to MDM instead. That's the way that most places that do this are going.
-
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
-
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
-
@scottalanmiller said:
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
This is what I meant. Give the customer the ability to deploy applications that use AAD as the authentication source.
-
@scottalanmiller said:
Right now, the answer for that is dropping AD and GPO and moving to MDM instead. That's the way that most places that do this are going.
This statement to me more or less implies that MDM vs AD and GPO are sorta related. They serve a lot of the same functions. I know MDM doesn't provide authentication - but it could.
This is why I always felt that MS should have an MDM solution as part of AD, now instead it should be part of AAD.
-
@Reid-Cooper said:
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
Precisely. This is purely a prediction on my part, but that is where I see this going. Microsoft can provide a high end, enterprise version of what Google and others are already doing. If they don't it is a lost market ripe for the picking.
-
@scottalanmiller said:
@Dashrender said:
@coliver said:
@scottalanmiller said:
This only works because those people were deemed separately to need Windows 10 and would be staying up to date on the latest Windows. While other teams are moving to Linux and there Azure AD won't work (yet.)
Are they going to be introducing AADFS or a similar SSO option?
According to Scott, things like O365 already work with SSO with AAD.
Yup, at least to some degree. What I want MS to do is to give us hooks into the SSO. SSO for Windows 10 + Office 365 is wonderful, but limited. I want my third party CRM and my ownCloud and my XO and stuff like that to all authenticate to Azure AD.
I think that they will, if they don't, Google is going to grab that market from them in no time and then it will be too late.
Agreed - facebook and Google already do this with their authentication systems.
-
@scottalanmiller said:
@Reid-Cooper said:
So you think that Azure AD is going to go the way of SSO services like FaceBook and Google have today, and websites or applications will just implement a standard interface to it and people can log into services with AAD, Google, Twitter or Facebook?
Precisely. This is purely a prediction on my part, but that is where I see this going. Microsoft can provide a high end, enterprise version of what Google and others are already doing. If they don't it is a lost market ripe for the picking.
If they can pull this off, think about how easy it would be to onboard a new employee. Instead of creating dozens of accounts for them all over the web, they just have an account you created for them in AAD or Google or FB.. when they quit or get fired.. just as easy to disable them all too.
-
Yes, and I'm sure that they can. It is just a matter of getting them to actually do it. Imagine a Facebook-like account integration, but enterprise with central account control!?! Who wouldn't pay for that! And the tie-in to MS services would be awesome. I think it is a huge win for them, I can't believe that they didn't do this years ago.
-
Oh, apparently I'm totally out of touch.
Ask and you shall receive...
https://channel9.msdn.com/Blogs/Open/Using-Azure-AD-for-Linux-logins
