How-to guides

General

• Access control with IAM

  Identity and Access Management (IAM) permissions and roles for Managed Microsoft AD.

• Adding and removing regions

  Add or remove domain controllers from regions.

• Attach and manage tags with domains

  Attach and manage tags with Managed Microsoft AD domains for access control.

• Backup and restore a domain

  Backup or restore a domain.

• Connecting to a Managed Microsoft AD domain

  Use RDP to connect to your managed Active Directory domain.

• Configuring MongoDB

  Configure MongoDB to authenticate with Managed Microsoft AD.

• Creating a group Managed Service Account

  Create a group Managed Service Account (gMSA).

• Creating a trust with an on-premises domain

  Establish a one-way or two-way trust between Managed Microsoft AD and your on-premises domain.

• Cross-project access using domain peering

  Configure domain peering between Managed Microsoft AD and Shared VPC.

• Deploying an Active Directory resource forest

  Set up a VPC and configure firewall rules that conform to security best-practices, use Managed Microsoft AD to deploy Active Directory, and create a management VM and join it to the domain.

• Deploying Active Directory Federation Services

  Deploy Microsoft Active Directory Federation Services (AD FS) for Windows Server 2019 in a Managed Microsoft AD domain.

• Enable permissions for migrating an on-premises domain

  Enable the permissions required for migrating an on-premises domain to Managed Microsoft AD while preserving SID History.

• Extend the schema

  Extend the schema of your Managed Microsoft AD instance.

• Listing, describing, and deleting domains

  List your existing Managed Service for Microsoft Active Directory domains, get information about them, and delete domains you no longer need.

• Listing, describing, and deleting domain peerings

  List your existing Managed Service for Microsoft Active Directory domain peerings, get information about them, and delete domain peerings you no longer need.

• Managing Active Directory objects

  Manage the Active Directory objects for your Managed Microsoft AD domain.

• Managing authorized networks

  Add or remove authorized networks from your Managed Microsoft AD domain.

• Managing trusts

  Manage a one-way trust relationship between an on-premises domain and a Managed Microsoft AD domain.

• Resolving queries for non-Managed AD objects in VPC networks

  Configure DNS forwarding from Google Cloud so that queries for Managed Microsoft AD resources located in another domain succeed.

• Using Fine-Grained Password Policy

  Use Fine-Grained Password Policy (FGPP).

• Using LDAPS

  Use LDAPS with Managed Microsoft AD.

• Using Microsoft SQL Server

  Add accounts so you can use Microsoft SQL Server with Managed Service for Microsoft Active Directory

• Using the delegated administrator account

  Use the Managed Service for Microsoft Active Directory delegated administrator account to manage domains.

• Using VPC Service Controls

  Use VPC Service Controls to provide additional security for Managed Microsoft AD service and resources.

Cloud SQL for SQL Server integration

• Using Managed Microsoft AD with Cloud SQL for SQL Server

  Integrate Managed Service for Microsoft Active Directory and Cloud SQL for SQL Server.

• Viewing integrated Cloud SQL for SQL Server instances

  View the Cloud SQL for SQL Server instances integrated with a given Managed Service for Microsoft Active Directory domain.

Audit Logging

• Using Cloud Audit Logs

  Learn about the audit logs that Managed Microsoft AD writes as a part of Cloud Logging, including Admin Activity and Data Access logs.

• Using Managed Microsoft AD Audit Logs

  Enable and view event logs for Managed Microsoft AD domain controllers for security and auditing.