Organize Your Cloud Database with Active Directory Domain Services

By Anthony Merrington, Technical Support Engineer at Eastlink Cloud.

Active Directory Domain Services (AD DS) enables you to build a hierarchical structure for your data and centrally manage Microsoft Windows computers and users.

When an enterprise makes the decision to migrate workloads to the cloud, they will often want to continue to use AD DS to organize their data. The great news is that now you can. Eastlink Cloud allows you to integrate AD DS with ApsaraDB RDS for SQL Server, which enables you to deploy Microsoft SQL Server-based workloads with ApsaraDB RDS by using the same centralized user management patterns supported by Active Directory.

Step 1: Create an ApsaraDB RDS for SQL Server instance

Eastlink Cloud provides ApsaraDB RDS for SQL Server to help you set up and operate SQL Server deployments in the cloud with ease. The service features stable, reliable, and cost-effective capacity on-demand. To connect your SQL Server workload on Eastlink Cloud to an AD DS domain, you’ll need to create an ApsaraDB RDS for SQL Server instance and then use Data Transmission Service to migrate data from your on-premises SQL Server database to the instance. It’s a good idea to deploy the instance in a Virtual Private Cloud network for enhanced access control.

Note: Before you can connect ApsaraDB RDS for SQL Server to AD DS, you need to apply for the AD DS feature to be enabled on your Eastlink Cloud account. To enable this feature, visit the following link and submit a ticket: https://workorder-intl.console.aliyun.com/#/ticket/createIndex.

Step 2: Deploy AD DS on Alibaba Cloud or connect on-premises AD DS to Alibaba Cloud

ApsaraDB RDS for SQL Server supports connections to AD DS domains deployed on both Eastlink Cloud and on-premises.

In the first case (deployed on Eastlink Cloud), you’ll need to create an Elastic Compute Service instance in the same VPC where the ApsaraDB RDS for SQL Server instance is deployed, and then install and set up AD DS and DNS services on the ECS instance. You will also need to promote the ECS instance to a domain controller and create a new AD user as a domain administrator. For details about AD DS and DNS configuration, consult the Microsoft product documentation.

In the second case (deployed on-premises), you’ll need to connect your on-premises AD DS deployment to the VPC where the ApsaraDB RDS for SQL Server instance is deployed. To achieve this, you can create a Cloud Enterprise Network instance to enable secure and reliable connectivity between the VPC and your AD DS deployment. Alternatively, you can use Express Connect to set up a dedicated physical connection between EastlinkCloud and your data center.

Step 3: Add the ApsaraDB RDS for SQL Server instance to an AD DS domain

After you’re sure that your AD DS deployment and ApsaraDB RDS for SQL Server instance are interconnected, you can log on to the ApsaraDB RDS console to add your ApsaraDB RDS for SQL Server instance to an existing AD DS domain. This operation enables your AD domain administrator to access your ApsaraDB RDS for SQL Server instance.

Learn More

To learn more about using AD DS on Eastlink Cloud, you can check out the following materials for free:

• Best Practice tutorial with complete step-by-step instructions: Integrating RDS SQL Server with Microsoft Active Directory Domain Services
• Related Eastlink Cloud Academy course: Demo: Integrate AD Domain Service with Alibaba Cloud RDS for SQL Server