Most Indian small and medium businesses (MSMEs) treat Active Directory (AD) the way they treat compliance paperwork: something big companies have, something they'll "do later", something that's not worth the hassle. That calculation made sense in 2015. In 2026 it's expensive — because the alternative to AD is a drawer full of shared passwords, Slack DMs with VPN keys, and a former intern who still has production access because nobody remembered to offboard them.
This article is a practical walk-through of what Active Directory costs in India, the real trade-offs between on-premises and cloud AD, and where managed Samba-based services fit. If you're running IT for a 10–500 person company in India, this is for you.
What Active Directory actually does
Active Directory is a directory service: a single source of truth for who works at your company, what groups they belong to, and what they're allowed to access. In practical terms, AD gives you:
- One username and password per employee that works across laptops, internal apps, Wi-Fi, file shares, VPN, and whatever you add next.
- Central policy control — "finance team can't install software", "interns can't access production", "laptops must encrypt their disk".
- Offboarding in one click — when someone leaves, their access is revoked everywhere at once.
- Audit trail — who logged in when, from where, and what changed.
Every mid-sized Indian company eventually builds some version of this, usually too late, usually with spreadsheets and Post-it notes for the first two years.
The real cost of on-premises AD in India
The list price of Windows Server is the least of your worries. A typical on-premises AD setup for an Indian MSME looks like this:
| Cost bucket | Typical range (20–100 user org) |
|---|---|
| Windows Server licence (Standard) | ₹45,000–₹90,000 per server |
| CALs (Client Access Licences) | ₹1,500–₹3,500 per user |
| Domain controller hardware (×2 for redundancy) | ₹1,50,000–₹3,00,000 |
| UPS, rack, networking | ₹50,000–₹1,00,000 |
| Annual power + AMC | ₹30,000–₹60,000/year |
| Certified admin (full-time or retainer) | ₹60,000–₹1,50,000/month |
| Windows updates, backups, DR | Labour |
| Physical office-presence dependency | Real cost when WFH happens |
For a 30-person company, you're looking at ₹5–8 lakh upfront and ₹10–20 lakh/year in carrying costs once staffing is counted. And that's before a single security upgrade.
The cost is not the licence. The cost is the operational ownership — someone has to patch it, monitor it, back it up, restore it when it fails, and know Windows Server well enough to debug a stuck replication. MSMEs rarely have that person full-time.
Cloud AD options in 2026
There are broadly four paths an Indian MSME can take:
1. Microsoft Entra ID (formerly Azure AD)
Microsoft's cloud identity service. Ships free with Microsoft 365; extended features (conditional access, MFA enforcement, privileged access) are paid.
- Good at: Microsoft 365 shops, cloud-only workflows, SSO into SaaS.
- Weak at: Legacy Windows clients that expect a real domain, group policies, printers, file shares — Entra ID is an identity-only service, not an AD replacement.
- Price: ~₹500–₹1000/user/month for the paid tiers (P1/P2), plus the Microsoft 365 subscription that typically carries it.
2. JumpCloud
A cloud directory that covers identity, device management, and SSO. Supports Windows, macOS, Linux endpoints.
- Good at: Mixed-OS teams, cloud-first companies with no legacy AD.
- Weak at: INR billing (USD only), India-hours support, full Windows domain features.
- Price:
USD $9–$19/user/month (₹750–₹1,600).
3. Okta Workforce Identity
An SSO and lifecycle-management platform. Technically not an AD replacement; it sits in front of apps. Used alongside an AD (on-prem or cloud) — not instead of one.
- Price:
USD $2–$15/user/month for various tiers (₹170–₹1,250).
4. Managed Samba AD (e.g. Hives.cloud Warden)
Samba is the open-source implementation of Microsoft's AD protocols. It provides full domain controller functionality — Windows logins, group policies, LDAP, Kerberos — without needing a Windows Server licence. Managed providers host it for you and bundle a VPN so remote employees can join the domain.
- Good at: Drop-in Windows AD replacement, INR billing, low per-user pricing, India support.
- Weak at: Cutting-edge Microsoft-specific features that only ship in Windows Server.
- Price: Warden starts at ₹449/user/month (annual) and includes the VPN.
Cloud vs on-prem — the short version
| Factor | On-prem AD | Cloud (managed) AD |
|---|---|---|
| Upfront cost | ₹3–8 lakh | ₹0 |
| Monthly cost (30 users) | Servers amortised + admin | ₹13,000–₹23,000 all-in |
| Requires Windows Server licence | Yes | No (for Samba-based services) |
| Requires in-house admin | Yes | No |
| Works for fully-remote team | Requires site-to-site VPN + patching | Built-in VPN, works anywhere |
| Updates/patches | Your responsibility | Vendor's responsibility |
| Failure = company stops | Yes, unless redundant | Multi-region SLA |
| Data residency | Your office | Ask the vendor; usually India |
For almost every Indian MSME under 500 people, cloud wins on total cost of ownership — and wins by a wide margin once you count admin time.
When on-prem still makes sense
Three scenarios genuinely justify on-premises AD in 2026:
- Regulated industries with strict data-locality rules — certain BFSI and defence contractors cannot host identity off-site.
- Companies with existing heavy on-prem AD investment and a staff that already runs it well.
- Air-gapped environments — factories, labs, secure facilities that cannot connect to the internet.
Outside of those, cloud AD is the pragmatic default.
What to actually do this week
If you're evaluating AD for your company in India, here's the one-hour version of the decision:
- Count your users and devices. Under 100 employees? Cloud AD is almost certainly right.
- List your must-have integrations. Windows laptops? macOS? Linux servers? Wi-Fi RADIUS? VPN? File shares?
- Check INR billing and India support. If a vendor quotes USD without GST, factor in 15–25% FX + tax overhead, and slow support hours.
- Ask for a trial domain. Don't buy AD on feature lists. Join a real laptop, try group policy, test the VPN.
- Benchmark against total cost of ownership, not just the licence — include admin hours saved.
If Samba + a built-in VPN + INR pricing sounds like the right shape, Warden by Hives.cloud is a direct fit for this buyer. It's the same product we've been shipping to Indian MSMEs since 2025, and the comparison table on the Warden page walks through it head-to-head against Microsoft AD, JumpCloud, and Okta.
FAQs
Is Samba AD the same as Microsoft Active Directory? Samba is a compatible implementation of the same protocols (LDAP, Kerberos, CIFS/SMB, SYSVOL replication). Windows clients can't tell the difference in normal operation. Some edge features — Azure hybrid identity, certain certificate services — require Microsoft's implementation.
Do I need a Windows Server licence to run Samba AD? No. Samba runs on Linux, and managed providers like Hives.cloud handle that for you.
Can I migrate from an existing Windows AD to a managed Samba AD? Yes. Most migrations are staged: add the new domain controller, replicate, cut over clients, decommission the old one. Expect 1–3 weekends for a mid-sized company.
What about group policies? Samba supports the same Group Policy Object (GPO) mechanism as Windows AD. Standard domain policies (password complexity, drive mappings, software install restrictions) work identically.
Is cloud AD safe for Indian businesses? Cloud AD is only as safe as its encryption and access controls. Ask for: AES-256 at rest, TLS 1.3 in transit, MFA on admin accounts, audit logs, and SOC 2 / ISO 27001 documentation. For India-specific compliance (DPDP Act, BFSI mandates), confirm data residency and breach-notification terms in writing.
How long does onboarding usually take? For a greenfield MSME deployment, 1–3 business days to activate the domain, enrol the first user, and issue VPN credentials. Larger or migration-style deployments take longer and should be scoped individually.