Microsoft Entra Domain Services (managed domain)
Entra Domain Services provides managed AD DS-style features in Azure without managing domain controllers. Formerly Azure AD Domain Services (Azure AD DS). Domain join, Group Policy, LDAP, Kerberos/NTLM. Microsoft manages and patches the domain controllers. One-way sync from Entra ID into the managed domain.