{"id":558,"date":"2016-02-24T20:51:04","date_gmt":"2016-02-24T20:51:04","guid":{"rendered":"https:\/\/regroove.ca\/stellark\/?p=558"},"modified":"2023-02-24T18:53:13","modified_gmt":"2023-02-24T18:53:13","slug":"aadconnect-configuration-tips-2","status":"publish","type":"post","link":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/","title":{"rendered":"AADConnect Configuration Tips"},"content":{"rendered":"<p>&nbsp;<\/p>\n<h2>The new AADConnect V1.1 has some significant changes this time around<\/h2>\n<p>\u2013 <a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnectsync-feature-scheduler\/\">OVERVIEW<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>I performed a \u201cfrom scratch\u201d install which was guided by the wizard driven interface in Office 365.<\/p>\n<p>Installation of the actual AADConnect software was fairly easy and if you have read any MS KB\u2019s or blog posts most will suggest to use the \u201cExpress Installation\u201d method as it is suitable for most installs.<\/p>\n<p>If you choose the \u201cExpress Installation\u201d method and do not opt to configure your own service accounts when prompted be aware that these are the accounts that will be created on your behalf: <a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnect-accounts-permissions\/\">INFO<\/a><\/p>\n<ul>\n<li>An account in Azure AD will be created for the sync service&#8217;s use<\/li>\n<li>A local account prefixed <strong>AAD_<\/strong> and used for the actual sync service to run as<\/li>\n<li>An account used for synchronization will be created and located in the forest root domain in the Users container and will have its name prefixed with <strong>MSOL_<\/strong><\/li>\n<\/ul>\n<p><strong><\/strong><\/p>\n<p>One issue I did have with this install which I had never experienced before was that the Office 365 user account I was using for install needed to be a member of Azure AD co-administrators. Only after I made it a co-administrator and selected \u201cre-try\u201d on the installation did the install actually complete.<\/p>\n<p>Once the install had completed I went about the process of creating my usual shortcuts and command line cheat sheets that I use for management purposes.<\/p>\n<p>&nbsp;<\/p>\n<p>What I found was that a couple things don\u2019t exist any longer:<\/p>\n<p>1) &#8220;C:\\Program Files\\Microsoft Azure AD Sync\\Bin\\DirectorySyncClientCmd.exe&#8221; NO longer exists<\/p>\n<p>2) Scheduled tasks for Sync operations no longer configured or exist<\/p>\n<p>Managing Synchronization options are now performed via PowerShell using the ADSyncScheduler cmdlet. Information on these commands and syntax can be found here &#8211; <a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnectsync-feature-scheduler\/\">INFO<\/a><\/p>\n<h4>&nbsp;<\/h4>\n<h2>Here are a few tasks and notes I have compiled to be performed POST AADConnect install<\/h2>\n<p>1) Open PowerShell and review the new default SyncSheduler settings &#8211; <b>Get-AdSyncScheduler<\/b><\/p>\n<p><a href=\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"padding-top: 0px;padding-left: 0px;padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png\" width=\"643\" height=\"188\"><\/a><\/p>\n<p>Note the new default Sync interval is now 30mins as opposed to previous 3 hours as seen by the AllowedSyncCycleInterval. This value can be changed but cannot be less than 30mins.<\/p>\n<p>&nbsp;<\/p>\n<p>2) Change default sync cycle using CustomizedSyncCycleInterval &#8211; <b>Set-AdSyncScheduler -customizedsycncecleinterval 03:00:00<\/b> (will change default sync time to every 3 hours)<\/p>\n<p>&nbsp;<\/p>\n<p>3) If SyncCycleEnabled is set to False you will need to enable it when you are ready to launch production Sync &#8211; <b>Set-ADSyncScheduler -SyncCycleEnabled $True<\/b><\/p>\n<p>&nbsp;<\/p>\n<p>4) If StagingModeEnabled is set to True you will need to re-run the AADConnect setup and disable it &#8211; <a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnectsync-feature-scheduler\/\">INFO<\/a><\/p>\n<p><a href=\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/clip_image004.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"clip_image004\" style=\"border-left-width: 0px;border-right-width: 0px;border-bottom-width: 0px;padding-top: 0px;padding-left: 0px;padding-right: 0px;border-top-width: 0px\" border=\"0\" alt=\"clip_image004\" src=\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/clip_image004_thumb.jpg\" width=\"575\" height=\"106\"><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>5) DirectorySyncClientCmd.exe is GONE. To launch a sync use PowerShell &#8211; <b>Start-ADSyncSyncCycle -PolicyType Delta<\/b> or <b>Initial<\/b><\/p>\n<p>&nbsp;<\/p>\n<p>6) Password synchronization can still be manually launched via PowerShell with the latest script \u2013 <a href=\"https:\/\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnectsync-implement-password-synchronization\/https:\/azure.microsoft.com\/en-us\/documentation\/articles\/active-directory-aadconnectsync-implement-password-synchronization\/\">INFO<\/a><\/p>\n<p>&nbsp;<\/p>\n<p>$adConnector = &#8220;&lt;CASE SENSITIVE AD CONNECTOR NAME&gt;&#8221;<br \/>\n$aadConnector = &#8220;&lt;CASE SENSITIVE AAD CONNECTOR NAME&gt;&#8221;<br \/>\nImport-Module adsync<br \/>\n$c = Get-ADSyncConnector -Name $adConnector<br \/>\n$p = New-Object Microsoft.IdentityManagement.PowerShell.ObjectModel.ConfigurationParameter \u201cMicrosoft.Synchronize.ForceFullPasswordSync\u201d, String, ConnectorGlobal, $null, $null, $null<br \/>\n$p.Value = 1<br \/>\n$c.GlobalParameters.Remove($p.Name)<br \/>\n$c.GlobalParameters.Add($p)<br \/>\n$c = Add-ADSyncConnector -Connector $c<br \/>\nSet-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $false<br \/>\nSet-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $true<\/p>\n<p>&nbsp;<\/p>\n<p>Hopefully some of these tips will help and ease the transition to yet another Sync management mechanism!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; The new AADConnect V1.1 has some significant changes this time around \u2013 OVERVIEW &nbsp; I performed a \u201cfrom scratch\u201d install which was guided by the wizard driven interface in Office 365. Installation of the actual AADConnect software was fairly easy and if you have read any MS KB\u2019s or blog posts most will suggest &hellip; <a href=\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\"><\/a><\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[5,11,33,60],"tags":[102,110,137,173],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>AADConnect Configuration Tips - Stephanie Kahlam<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AADConnect Configuration Tips - Stephanie Kahlam\" \/>\n<meta property=\"og:description\" content=\"&nbsp; The new AADConnect V1.1 has some significant changes this time around \u2013 OVERVIEW &nbsp; I performed a \u201cfrom scratch\u201d install which was guided by the wizard driven interface in Office 365. Installation of the actual AADConnect software was fairly easy and if you have read any MS KB\u2019s or blog posts most will suggest &hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Stephanie Kahlam\" \/>\n<meta property=\"article:published_time\" content=\"2016-02-24T20:51:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-24T18:53:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png\" \/>\n<meta name=\"author\" content=\"Stephanie Kahlam\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Stephanie Kahlam\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\",\"url\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\",\"name\":\"AADConnect Configuration Tips - Stephanie Kahlam\",\"isPartOf\":{\"@id\":\"https:\/\/regroove.ca\/stellark\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png\",\"datePublished\":\"2016-02-24T20:51:04+00:00\",\"dateModified\":\"2023-02-24T18:53:13+00:00\",\"author\":{\"@id\":\"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/175e89cb69612178b2ac838c0bab6149\"},\"breadcrumb\":{\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage\",\"url\":\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png\",\"contentUrl\":\"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png\",\"width\":643,\"height\":188},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Stellark Home\",\"item\":\"https:\/\/regroove.ca\/stellark\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AADConnect Configuration Tips\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/regroove.ca\/stellark\/#website\",\"url\":\"https:\/\/regroove.ca\/stellark\/\",\"name\":\"Stephanie Kahlam\",\"description\":\"Microsoft 365 and SMB.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/regroove.ca\/stellark\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/175e89cb69612178b2ac838c0bab6149\",\"name\":\"Stephanie Kahlam\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/398b95e23dc9eaf37a780b86a239b485?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/398b95e23dc9eaf37a780b86a239b485?s=96&d=mm&r=g\",\"caption\":\"Stephanie Kahlam\"},\"url\":\"https:\/\/regroove.ca\/stellark\/author\/skahlam\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AADConnect Configuration Tips - Stephanie Kahlam","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/","og_locale":"en_US","og_type":"article","og_title":"AADConnect Configuration Tips - Stephanie Kahlam","og_description":"&nbsp; The new AADConnect V1.1 has some significant changes this time around \u2013 OVERVIEW &nbsp; I performed a \u201cfrom scratch\u201d install which was guided by the wizard driven interface in Office 365. Installation of the actual AADConnect software was fairly easy and if you have read any MS KB\u2019s or blog posts most will suggest &hellip;","og_url":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/","og_site_name":"Stephanie Kahlam","article_published_time":"2016-02-24T20:51:04+00:00","article_modified_time":"2023-02-24T18:53:13+00:00","og_image":[{"url":"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png"}],"author":"Stephanie Kahlam","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Stephanie Kahlam","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/","url":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/","name":"AADConnect Configuration Tips - Stephanie Kahlam","isPartOf":{"@id":"https:\/\/regroove.ca\/stellark\/#website"},"primaryImageOfPage":{"@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage"},"image":{"@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage"},"thumbnailUrl":"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png","datePublished":"2016-02-24T20:51:04+00:00","dateModified":"2023-02-24T18:53:13+00:00","author":{"@id":"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/175e89cb69612178b2ac838c0bab6149"},"breadcrumb":{"@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#primaryimage","url":"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png","contentUrl":"https:\/\/regroove.ca\/stellark\/wp-content\/uploads\/sites\/3\/2016\/02\/image_thumb.png","width":643,"height":188},{"@type":"BreadcrumbList","@id":"https:\/\/regroove.ca\/stellark\/2016\/02\/24\/aadconnect-configuration-tips-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Stellark Home","item":"https:\/\/regroove.ca\/stellark\/"},{"@type":"ListItem","position":2,"name":"AADConnect Configuration Tips"}]},{"@type":"WebSite","@id":"https:\/\/regroove.ca\/stellark\/#website","url":"https:\/\/regroove.ca\/stellark\/","name":"Stephanie Kahlam","description":"Microsoft 365 and SMB.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/regroove.ca\/stellark\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/175e89cb69612178b2ac838c0bab6149","name":"Stephanie Kahlam","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/regroove.ca\/stellark\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/398b95e23dc9eaf37a780b86a239b485?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/398b95e23dc9eaf37a780b86a239b485?s=96&d=mm&r=g","caption":"Stephanie Kahlam"},"url":"https:\/\/regroove.ca\/stellark\/author\/skahlam\/"}]}},"_links":{"self":[{"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/posts\/558"}],"collection":[{"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/comments?post=558"}],"version-history":[{"count":1,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/posts\/558\/revisions"}],"predecessor-version":[{"id":1431,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/posts\/558\/revisions\/1431"}],"wp:attachment":[{"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/media?parent=558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/categories?post=558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regroove.ca\/stellark\/wp-json\/wp\/v2\/tags?post=558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}