Updated October 25, 2026
· ~2 min read
Moving Windows servers, SQL Server or file shares to AWS brings Active Directory with them: domain join, Group Policy, Kerberos, service accounts. The choice is whether AWS runs the domain controllers, you do, or you extend the domain you already have.
AWS Managed Microsoft AD now comes in three editions. Standard (up to about 30,000 directory objects) and Enterprise (about 500,000) create a new domain, usually trusted by your existing one. Hybrid Edition, the newer option, extends your existing domain into AWS with AWS-managed domain controllers in it.
Question 1 of 2
Do workloads on AWS need domain join, Group Policy or Kerberos?
**AWS Managed Microsoft AD:** most companies moving Windows workloads to AWS. AWS patches, backs up and monitors the domain controllers; you get a domain for EC2, RDS for SQL Server, FSx and WorkSpaces without running DCs yourself. **Self-managed DCs on EC2:** you need full control (schema extensions, specific replication topology, third-party tools that need domain admin) and have people who run AD well. **AD Connector:** you only need AWS services to authenticate against your existing on-premises AD, without a directory in AWS. **Entra ID alone:** new or cloud-first workloads that do not need Kerberos or Group Policy. Do not add a domain you do not need.
Windows Server, SQL Server and .NET End-of-Support Migration
Get every Windows Server 2012/2016, SQL Server 2016/2017 and .NET Framework or .NET 8 workload onto a supported version before the deadlines, with the licence savings found along the way. Inventory, retire, upgrade or modernize, decided application by application.
AWS Landing Zone Foundation
Enterprise-grade AWS account structure designed for security, scalability, and compliance from day one.
VMware Exit to AWS
Move off VMware before the next renewal: most VMs rehosted to right-sized EC2 with AWS Application Migration Service, a time-boxed Amazon EVS landing for what cannot move yet, and the data center contract ended on a date you choose.
We work with startups and growing companies on AWS architecture decisions. Tell us about your situation and we will recommend the right approach.
As of October 25, 2026. Provided as is, for general information, and accurate to the best of our knowledge on the date shown. Not legal, compliance, tax, financial or other professional advice. Prices, limits and vendor services change; check current vendor documentation before relying on anything here. Terms of use.