Client has Windows 2008R2 domain. All servers 2008R2 (no 2012). Client is using Office 365 E3.
Client wants to update their password policy as it has been dragging. They need to implement standard best practice and have AD passwords forced to change every 90 days. I can set Group Policy without issue.
However, I need to know the best way to implement the AD to Office 365 side of things. The users are not the most IT literate users and I don't want to end up creating more work for IT Support.
I have seen https://blogs.technet.microsoft.com/canitpro/2015/09/11/step-by-step-setting-up-ad-fs-and-enabling-single-sign-on-to-office-365/
but it talks about Server 2012. Can I setup AD FS and Directory Sync with Server 2008R2?
Any pitfalls from experience? Any tips or advice?