Link to home
Start Free TrialLog in
Avatar of keystonetech
keystonetechFlag for Canada

asked on

Office 365 Azure AD Connect - Password Sync

We have a server 2008 R2 DC and are trying to sync the local passwords with the passwords of Office 365 accounts.  I've installed Azure AD Connect and configured it.  In Office 365 it shows the directory and passwords as having synced but all users Sync Type is listed as In Cloud and the passwords still haven't synced.  I've successfully done this with a different company can not get it to work here.
Is there any way to get useful logging information from the Azure AD Connect software?
ASKER CERTIFIED SOLUTION
Avatar of zvitam
zvitam
Flag of Israel image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If the users were created in O365 *before* you installed AAD Connect, you need to "link" them to the on-premises users. You have two options:

1) Soft match, as detailed here: http://support.microsoft.com/kb/2641663
2) Hard match, as detailed here: http://blogs.technet.com/b/praveenkumar/archive/2014/04/12/how-to-do-hard-match-in-dirsync.aspx
If the account used to configure the AAD Connect AD connector a domain or enterprise admin, you must delegate the "Replicating Directory Changes" and "Replicating Directory Changes All" permissions.

I wrote a tool and have it published on the TN gallery for exactly this purpose: http://aka.ms/aadpermissions.