How to: Manage Azure Active Directory Domain Service via Virtual Server 

NOTE: The same manageability as in house domain controller is not required as it is a managed domain services.

The following are administrative tasks you can perform on a managed domain:

• Gain administrative access to computers joined to the managed domain
• Join machines to the managed domain
• Configure the built-in GPO for the ‘AADDC Computers’ and ‘AADDC Users’ containers in the managed domain
• Create and administer custom Organizational Units (OUs) on the managed domain
• Administer DNS on the managed domain.  

 The following are administrative privileges you do not have on a managed domain:

• You are not granted Domain Administrator or Enterprise Administrator privileges for the managed domain
• You cannot add domain controllers to the managed domain
• You cannot connect to domain controllers for the managed domain using Remote Desktop
• You cannot extend the schema of the managed domain

Step 1: Creating the VM

First we need to setup new VM under the same virtual network as the managed domain.

1)    In order to join VM to the same virtual network, we have to use Azure classic portal to build the VM
2)    Log in to the azure classic portal > New > Compute > Virtual Machine > From Gallery ( The reason is using this option can define the advanced options)

To see the full guide, go to CANITPRO.