Explanation https://docs.microsoft.com/en-us/azure/active-directory-domain-services/compare-identity-solutions Azure AD Domain Services provides managed domain services such as domain join, group policy, LDAP, Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory.