- Newest
- Most votes
- Most comments
I apologize, but there seems to be a misunderstanding in your request. Adding a local machine directly to an EC2 instance running Windows Server without creating a directory is not a standard or recommended practice.
To join your local machine to the Active Directory (AD) you've set up on your EC2 instance, you need to establish proper network connectivity between your on-premises network and the AWS cloud. This typically involves setting up a Site-to-Site VPN or AWS Direct Connect.
Here are the general steps you should follow:
-
Ensure network connectivity: Set up a secure connection between your local network and the AWS VPC where your EC2 instance is running. This is crucial for your local machine to communicate with the AD in AWS.
-
Configure DNS: Your local network's DNS server should be able to resolve the domain name of your AWS-hosted AD. You may need to configure your on-premises DNS to forward queries for the AD domain to the AWS Directory Service-provided DNS servers.
-
Firewall and Security Group settings: Make sure your EC2 instance's security group and any on-premises firewalls allow the necessary traffic for AD communication (including DNS, Kerberos, LDAP, etc.).
-
Join the domain: Once network connectivity and DNS are properly configured, you should be able to join your local machine to the domain using the standard Windows process.
If you're still encountering issues after ensuring these prerequisites are met, you may need to check your AD configuration on the EC2 instance, verify that the necessary AD services are running, and ensure that your local machine has the correct date, time, and time zone settings.
Remember, joining on-premises machines to a cloud-hosted AD requires careful network planning and configuration. If you're not experienced with this type of setup, you might want to consider engaging with a professional or exploring AWS Directory Service options that are designed to simplify this process.
Sources
Connect my on-premises machines to AWS Managed Microsoft AD | AWS re:Post
Ways to join an Amazon EC2 instance to your Active Directory - AWS Directory Service
Relevant content
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 2 years ago

Is there is an option to connect without VPN....?
So you are saying that we can't manage active directory setup in only EC2 instance...?
I think you can join the domain by using the AD DS public IP address. However, for security reasons, it is not recommended to have a public IP address in AD DS and expose it on a public network.
Riku ) I didn't get your point can we connect over a call or any platform