Solved

Tail end of a cutover migration - should I use DirSync as usual or Azure Active Directory Synchronization Services (AAD Sync)?

Posted on 2015-02-06
6
294 Views
Last Modified: 2015-02-07
Any horror stories or was your implementation perfect of Azure Active Directory Synchronization Services (AAD Sync)?
0
Comment
Question by:K B
  • 3
  • 2
6 Comments
 
LVL 15

Expert Comment

by:Ivan
ID: 40594962
Hi,

I have used this tool twice, in my company and other one, and had no problem..
Goes same as DirSync...If you have multiforest, then you should use this one, if not, guess it's up to you :)
0
 
LVL 5

Author Comment

by:K B
ID: 40594975
I was looking at write back from self service password reset tool -back to AD.

 Any experience seeing the difference between the two tools in this category?
0
 
LVL 38

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
ID: 40595496
If you are going for password write-back, better go with AADSync. Also, you need AD Premium enabled. Check more info here: https://msdn.microsoft.com/en-us/library/azure/dn903642.aspx

In general, you should use AADSync now, as dirsync will eventually be deprecated. If you are planning on installing it on older servers however, better use dirsync, as AADSync has some issues when installed on server 2008. Regardless of which tool you use, for password sync you need minimum 2008 R2.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 5

Author Comment

by:K B
ID: 40595639
So this is some great information but where does it say here that I need AD Premium (or does Microsoft simply omit it?) https://msdn.microsoft.com/en-us/library/azure/dn757582.aspx  - also embedded/attached as an image

Also for Microsoft Azure Active Directory Sync Services the minimum requirements are: Windows Server 2008, 2008R2, 2012, or 2012R2.  I will stay away from 2008.  Thank you for heads up there.

It does not look like I will be able to take advantage of the password writeback feature as this customer has not paid for AD Premium.

One last question about Password Writeback feature...  
Does it require a Hybrid / Coexistence On-Premise Exchange Server?

Comparison-of-Microsoft-Azure-Active-Dir
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
ID: 40595889
Check the article I linked, it specifically lists the AD Premium requirement. And no, it doesnt require anything Exchange related.
0
 
LVL 5

Author Comment

by:K B
ID: 40595959
Oh yeah I saw the Article. Thank you for that.
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
This article will help you understand what HashTables are and how to use them in PowerShell.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now