Skip to content

Need a help to add my local machine into EC2 instance windows server without creating directory

0

Dear AWS Support Team,

I hope you are doing well. I am experiencing an issue with my Windows Server 2022 EC2 instance, which I have promoted to a Domain Controller in AWS. However, I am unable to join my local machine to the Active Directory (AD) hosted on the AWS cloud. Below are the details:

  1. Issue Description: I have created a Windows Server 2022 EC2 instance and successfully connected via RDP. I installed Active Directory Domain Services (AD DS) and promoted the server to a Domain Controller. However, when I try to add my local machine (from my on-premises network) to the domain, it fails with I need assistance in diagnosing and resolving this connectivity issue.
asked a year ago108 views
1 Answer
0

I apologize, but there seems to be a misunderstanding in your request. Adding a local machine directly to an EC2 instance running Windows Server without creating a directory is not a standard or recommended practice.

To join your local machine to the Active Directory (AD) you've set up on your EC2 instance, you need to establish proper network connectivity between your on-premises network and the AWS cloud. This typically involves setting up a Site-to-Site VPN or AWS Direct Connect.

Here are the general steps you should follow:

  1. Ensure network connectivity: Set up a secure connection between your local network and the AWS VPC where your EC2 instance is running. This is crucial for your local machine to communicate with the AD in AWS.

  2. Configure DNS: Your local network's DNS server should be able to resolve the domain name of your AWS-hosted AD. You may need to configure your on-premises DNS to forward queries for the AD domain to the AWS Directory Service-provided DNS servers.

  3. Firewall and Security Group settings: Make sure your EC2 instance's security group and any on-premises firewalls allow the necessary traffic for AD communication (including DNS, Kerberos, LDAP, etc.).

  4. Join the domain: Once network connectivity and DNS are properly configured, you should be able to join your local machine to the domain using the standard Windows process.

If you're still encountering issues after ensuring these prerequisites are met, you may need to check your AD configuration on the EC2 instance, verify that the necessary AD services are running, and ensure that your local machine has the correct date, time, and time zone settings.

Remember, joining on-premises machines to a cloud-hosted AD requires careful network planning and configuration. If you're not experienced with this type of setup, you might want to consider engaging with a professional or exploring AWS Directory Service options that are designed to simplify this process.
Sources
Connect my on-premises machines to AWS Managed Microsoft AD | AWS re:Post
Ways to join an Amazon EC2 instance to your Active Directory - AWS Directory Service

answered a year ago
EXPERT
reviewed a year ago
EXPERT
reviewed a year ago
  • Is there is an option to connect without VPN....?

    So you are saying that we can't manage active directory setup in only EC2 instance...?

  • I think you can join the domain by using the AD DS public IP address. However, for security reasons, it is not recommended to have a public IP address in AD DS and expose it on a public network.

  • Riku ) I didn't get your point can we connect over a call or any platform

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.