Live data from Hacker News

Does Company ‘X’ have an Azure Active Directory Tenant?

shawntabrizi.com

11–20 of 197 posts

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#14
post #4

Which products are used by large companies that don't have a AAD / AD structure?

On prem AD?

In contrast, the vast majority of companies with Azure AD also have on-prem AD (full name: "Active Directory: Domain Services") with some type of synchronization between them. Usually this amounts to having an on-prem service that shleps password hashes (technically salted, stretched hashed versions of the on-prem hashes) to Azure.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#15
post #6

I thought it would be 100%; everyone switched to AD after Novell. What are the 16.6% using is the interesting part?

Nearly 100% have on-prem AD (full name: "Active Directory: Domain Services"). Azure AD is a separate identity provider -- to a first approximation it's HTTPS and cookies, not Kerberos, LDAP, and Ticket-Granting Tickets that we see on-prem.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#16
post #6

I thought it would be 100%; everyone switched to AD after Novell. What are the 16.6% using is the interesting part?

Everyone with O365 has Azure AD. But a smaller number has Azure AD Premium.

That’s growing as salespeople get canned if they don’t sell it.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#17
post #8

Earlier quoted context omitted.

But also, what does it say about anything?

Microsoft absolutely dominates corporate IT. Their Office 360 delivers to much values at a low cost that the corps suffer from mediocre MS products because it's all there through a single subscription.

Same for the Google options; except the Google options tend to make non-backward compatible changes and often only go 90% of the way to meet the competition in terms of features. Even their spam detection is not where postini had it years ago.

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#18
This is assuming the domain has it, but it's even easier actually - you can just DIG DNS records and see if what they run as MX, cnames, etc, if there is teams DNS records and the MX record points to *.onmicrosoft.com or $tenantname.mail.protection.outlook.com there you go, even easier than "querying" google and seeing what's index.

And much easier to script too. ;)

Re: Does Company ‘X’ have an Azure Active Directory Tenant?

#20

Assuming the #1 Google result on page 1 of search is the companies public domain is a flaw. Some companies use a different domain for corporate use than their public domain name. Like fb.com

They said that

One thing to note about these results is that when we get a result that says the company has a tenant, we are nearly 100% correct in that fact. However, if we say that a company does not have a tenant, we are not necessarily correct. It is possible that the google result did not point to their actual domain name, or they are using a different domain name for their AAD Tenant.

If you wanted to do this really robustly, you would probably want to get a better source for your domain names than automated google search results. You might want to also look at other combinations like “companyname.onmicrosoft.com”, however we are doing just rough estimates here.

Post reply on HN