Solved

New Local Active Directory Server for an Existing Office 365 Environment.

Posted on 2016-07-27
4
87 Views
Last Modified: 2016-07-27
Greetings,
I'm looking for a bit help with a small office using Office 365.  They have about 30 workstations but do not have a server onsite.  They are using Office 365 for Exchange, SharePoint, etc.  The problem is maintaining user accounts and network printers on all 30 workstations is getting very painful.  So, I'd like to deploy a small server and create a local AD Domain and sync all of the user accounts from Office 365 to the new DC.  I've read several articles and TechNet docs about syncing with Azure AD Sync but everything I've read deals with syncing current domains or migrating from local domains to O365 and not vice versa.  Has anyone tried doing this or know of a process for it?
0
Comment
Question by:DMJorgensen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 41731936
What you want, specifically, cannot be done. You can create a local domain.  And you can (eventually) have sync in place. But syncing is always from AD to AAD, not vice versa.

So you'll be creating the on-prem domain accounts, not just pulling them down from AAD. Once created, as long as you ensure the SMTP address property matches their primary address in Office 365, then when you do set up syncing, Office 365 will soft-match using that address and future on-prem changes will properly sync to the exiting O365 account. But you do have some initial setup to do if you go that route.
0
 
LVL 5

Author Comment

by:DMJorgensen
ID: 41731953
Awesome, that sounds like a really good time.  So, just to clarify:  I create a new empty domain, create users based on the O365 accounts / email address property, and then go through the sync process to match the local and cloud accounts?  Would it be wise to make the on-prem domain namespace a domain.local instead of the public namespace of domain.com?
0
 
LVL 58

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 41731964
You got it. As for the namespace, I am a proponent of using a subdomain of your primary public domain. So if you are company.com, going with hq.company.com or similar is not a bad way to go. That way, if you ever need to go child domain or make distinctions, yo can go seattle.company.com, sanfran.company.com, finance.company.com, etc, and keep it all internal. But you also avoid the issues of internal users needing to access a website at "company.com" and always hitting the DC as you would if you didn't use a subdomain.

Most AD experts I know now advocate this method. Existing .local domains don't need to be migrated in any short term way, but when starting fresh, this is the most sustainable method. Might as well start on the right foot.
0
 
LVL 5

Author Comment

by:DMJorgensen
ID: 41731973
Got it.  Good info Cliff, thanks for the help!
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of the companies I’ve worked with have embraced cloud solutions due to their desire to “get out of the datacenter business.” The ability to achieve better security and availability, and the speed with which they are able to deploy, is far grea…
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Office 365 is currently available in five editions. Three of them are for business use: Office 365 Business Essentials, Office 365 Business, and Office 365 Business Premium. Two of them are for home/personal use: Office 365 Home and Office 365 Perso…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question