Retiring on-prem Active Directory: what still requires it

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

Retiring on-prem Active Directory: what still requires it

What still needs on-premises Active Directory in a Microsoft 365 organisation — Kerberos, file servers, RADIUS, printing — what replaces each, and the order.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

What still requires on-premises Active Directory?

Kerberos or NTLM-only applications, Windows file servers with NTFS permissions, Group Policy for devices, network RADIUS/802.1X tied to AD, legacy print servers, and some line-of-business systems that bind to LDAP. Each…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

Can Entra ID replace Group Policy?

For Windows devices managed by Intune, yes — settings catalog, security baselines, and administrative templates cover most Group Policy use, and Group Policy analytics in Intune maps existing GPOs. Anything Intune canno…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

What is Entra Domain Services and does it help retire AD?

Entra Domain Services is a managed AD-compatible domain in Azure (Kerberos, LDAP, Group Policy) fed from Entra ID. It lets legacy apps that need a domain keep working without on-premises domain controllers, which is a s…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/hybrid-identity-retiring-on-prem-active-directory

Slide 4Download PNG

Auto-generated from Retiring on-prem Active Directory: what still requires it. This page is not indexed and isn't part of the guide itself.