Hello,
I am implementing NSGs in an Azure environment. When i apply a Deny Any Internet on the Domain controller Subnet (2 DC), i am not able to login with RD Web access anymore (DMZ has internet allowed). After the Deny Any Internet is an Allow Any Any applied.
Internet-outbound Deny Internet
AllowAny-outbound Any Any
Can a domain controller still be a Azure DNS server with these rules up? Since the DC needs to contact the Azure DNS.