Share via

Microsoft Entra Domain Services - in resource group, is it being used for anything or can it be removed.

William Beeley 20 Reputation points
2026-05-21T11:17:43.8266667+00:00

The specific resource group contains cciproducts.com that is type Microsoft Entra Domain Services. I am not sure if this is actually being used for anything? How can we be sure before we remove it?

User's image

Microsoft Security | Microsoft Entra | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. William Beeley 20 Reputation points
    2026-05-21T11:24:16.9666667+00:00

    There is no way to tell if it is in use? a report or a log?

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-05-21T11:18:03.61+00:00

    The highlighted cciproducts.com resource is the Microsoft Entra Domain Services managed domain for the tenant. It provides domain join, LDAP, Kerberos/NTLM, and Group Policy to workloads in the associated virtual network(s). It also continuously syncs users, groups, and credential hashes from Microsoft Entra ID.

    There is no built‑in way to “pause” or temporarily disable this service to test whether it is used. The only way to stop billing is to delete the managed domain, and deletion is permanent.

    To assess whether it is still needed before deleting:

    1. Identify dependent workloads
      • Check for any Azure VMs (Windows or Linux) joined to this domain (for example, joined to cciproducts.com) and using it for sign‑in.
      • Check any applications that rely on LDAP, Kerberos/NTLM, or Group Policy via this domain (for example, legacy line‑of‑business apps, file servers, or app servers migrated from on‑premises AD DS).
      • Review DNS settings on VNets/subnets that might point to the Domain Services IPs.
    2. Validate impact of removal
      • If the managed domain is deleted:
        • Domain controllers are deprovisioned and removed from the VNet.
        • All data in the managed domain (custom OUs, GPOs, DNS records, service principals, gMSAs, etc.) is permanently deleted.
        • Any machines joined to the managed domain lose their trust relationship and can no longer be accessed with corporate domain credentials; only local admin accounts will work until they are unjoined and reconfigured.
    3. If confident nothing depends on it
      • Sign in to the Microsoft Entra admin center as a Global Administrator.
      • Go to Microsoft Entra Domain Services → select the cciproducts.com managed domain → Overview → Delete.
      • Confirm by typing the domain name and complete deletion. It can take 15–20 minutes or more.

    If there is any doubt about dependencies (for example, unknown VMs or legacy apps), do not delete the managed domain until those dependencies are fully inventoried, because the deletion cannot be reversed.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.