在Azure VM上将AD DC设置为辅助域控制器(Replica)需要以下站点:站点VPN.但是，如果在这种情况下VPN不可用，则本地PC将无法登录到网络.作为一种更好的做法，您可以保留至少两台 内部部署DC，以实现高可用性/容错能力.参考:

Setting up an AD DC on Azure VM as a secondary domain controller (Replica) requires a site-to-site VPN. But if the VPN is unavailable in that case, the PCs on-premise cannot log on to the network. As a better practice you could keep at least two DCs on-premise for high availability/fault tolerance. Reference: https://blogs.technet.microsoft.com/canitpro/2013/05/08/step-by-step-installing-a-replica-active-directory-domain-controller-in-windows-azure/

如果您打算使用纯云环境 可以选择Azure AD域服务.

If you're planning for a cloud only environment Azure AD Domain Services is the option.

--------------------------------------------------- -------------------------------------------------- ----------------------------------
如果此答案有帮助，请单击"标记为答案"，然后单击投票.要提供有关您的论坛体验的其他反馈，请单击 这里 

-----------------------------------------------------------------------------------------------------------------------------------
If this answer was helpful, click "Mark as Answer" and Up-Vote. To provide additional feedback on your forum experience, click here