I'm planning to move our Active Directory services to the Azure. Currently have done setup the Domain Services on Azure, what's the best practice for deploying to users (i want to authenticate the user desktop login on my site) ?
Do i need to create site-to-site VPN for every branch or just open ports to the public IP ?
Many thanks