Azure AD Domain Services vs Self-managed AD DS

Azure AD Domain Services enables you to deploy your workloads in Azure Infrastructure Services, without having to worry about maintaining your identity infrastructure.

Comparison of Azure AD Domain Services to DIY AD domain in Azure:

Feature	Azure AD Domain Services	Self-managed AD DS
Managed service	✓	✕
Secure deployments	✓	Administrator needs to secure the deployment.
DNS server	✓ (managed service)	✓
Domain or Enterprise administrator privileges	✕	✓
Domain join	✓	✓
Domain authentication using NTLM and Kerberos	✓	✓
Custom OU structure	✓	✓
Schema extensions	✕	✓
AD domain/forest trusts	✓ (one-way outbound forest trusts only)	✓
LDAP read	✓	✓
Secure LDAP (LDAPS)	✓	✓
LDAP write	✓ (within the managed domain)	✓
Group Policy	✓	Full
Geo-distributed deployments	✕	✓