How can one administer a Simple AD that was created under WorkDocs with users used in WorkSpaces now that WorkDocs is gone?

Question

Subject: "Simple AD User Management After WorkDocs Discontinuation - No Web Interface Available"

Key Points to Include:

You have a WorkDocs-created Simple AD directory (d-nnnnn
    / corp.workdocs-nnnnnn.com
    )
    Users were originally created through WorkDocs web interface
    WorkDocs is discontinued, but you still need the directory for WorkSpaces
    AWS Console only allows password resets, not user creation
    Directory Service Data APIs are not supported for Simple AD
    No web-based user management options are available
    This creates a significant operational gap for organizations migrating away from WorkDocs

What You Need:

A web-based method to create and manage users in Simple AD
    Clear documentation on post-WorkDocs user management options
    Guidance on migration paths if no web interface will be provided

Kidd Ip · Answer

Consider this:

1. Use EC2 Joined to Simple AD + RSAT Tools
•	Launch a Windows EC2 instance joined to your Simple AD domain
•	Install Remote Server Administration Tools (RSAT) on that instance
•	Use Active Directory Users and Computers (ADUC) to manage users and groups
This gives you a full GUI for user creation, password resets, and group management, just like traditional AD.
2. Migrate to AWS Managed Microsoft AD
•	If your needs are growing, consider migrating to AWS Managed Microsoft AD
•	It supports: 
o	Full PowerShell and ADUC access
o	Trust relationships
o	Schema extensions
3. Use LDAP Tools
•	Simple AD supports LDAP, so you can use tools like Apache Directory Studio or ldapadd/ldapmodify from Linux
•	Requires careful setup and knowledge of LDAP schemas

https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_simple_ad.html

Taz · Answer

Hey,

Hope you're keeping well.

Since Simple AD has no native AWS web UI for user management, the practical option is to use a Windows EC2 instance joined to the Simple AD domain and install RSAT tools to access Active Directory Users and Computers. This lets you create, modify, and manage accounts directly in the directory. Alternatively, you can connect via LDAP from an on-premises or cloud-based AD management tool. If long-term web-based administration is important, consider migrating the WorkSpaces directory to AWS Managed Microsoft AD, which has broader admin tooling and integration options.

Thanks and regards,  
Taz

How can one administer a Simple AD that was created under WorkDocs with users used in WorkSpaces now that WorkDocs is gone?

Add your answer

Relevant content