I have the application, that runs on several machines – IIS, APP and SQL Server. In Intranet environment all the components run under domain user privileges, because application uses network shares and windows auth in SQL. Now I need to plan all this on the cloud. I already have 3 Vmachines. I want to find the safest configuration possible. I want to continue to use windows authentication with SQL, is it possible? Do I need to install DC on one of he VMs? Is it recommended? What is recommended way to plan the application that should work on cloud? Are there any Microsoft recommendations on the Net? Firewalls exist in the cloud.