{"id":1587,"date":"2019-07-19T23:14:13","date_gmt":"2019-07-19T22:14:13","guid":{"rendered":"https:\/\/hypervlab.co.uk\/?p=1587"},"modified":"2023-07-13T17:36:50","modified_gmt":"2023-07-13T16:36:50","slug":"deploying-azuread-sync-tool","status":"publish","type":"post","link":"https:\/\/hypervlab.co.uk\/?p=1587","title":{"rendered":"Deploying AzureAD Sync Tool"},"content":{"rendered":"Reading Time: <\/span> 4<\/span> minutes<\/span><\/span>\n

In this blog post, I will cover setting up and configuration of the Microsoft AzureAD Sync Tool. this blog post assumes that you already have an Active Directory and Azure\/O365 Environment. <\/p>\n\n\n\n

What is AzureAD Sync<\/strong>?<\/h3>\n\n\n\n

Originally called DirSync, DirSync was a tool created by Microsoft and initially released on the 8 July 2013 to allow on-premise active directory servers to replicate their user database to the Microsoft Cloud to take advantage of Microsoft O365 and Microsoft Azure. Then on the 24 June 2015 AzureAD Sync was released as GA.<\/p>\n\n\n\n

Where can I download AzureSync?<\/strong><\/h2>\n\n\n\n

You can either download the direct from the Microsoft download site [Link Here<\/a>]<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Alternatively, you can download the setup installer from your Azure Portal under the Azure Directory<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

AzureAD Prerequisites <\/strong><\/h3>\n\n\n\n
\"\"
Source: https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/how-to-connect-install-prerequisites<\/a> <\/figcaption><\/figure>\n\n\n\n

Windows Server Prerequisites <\/strong><\/h3>\n\n\n\n
\"\"
Source: https:\/\/docs.microsoft.com\/en-us\/azure\/active-directory\/hybrid\/how-to-connect-install-prerequisites<\/a> <\/figcaption><\/figure>\n\n\n\n

FQDN Domains and UPNs<\/strong><\/h3>\n\n\n\n

For AzureAD to work, ideally you want to your companies FQDN Domain: hypervlab.co.uk
If your current active directory domain was created as “.local<\/em>” domain or if you’re domain as an ‘ad.’ prefix – You will need to add an extra UPN Address. For more information about active directory domain best practise you can have a read of this really useful post on varonis<\/em> [Link Here<\/a>]<\/p>\n\n\n\n

Adding Additional UPN to your Active Directory<\/strong><\/h2>\n\n\n\n

For my lab environment, I created the active directory domain using a prefix of ‘ad.’ obviously standing for active directory. this is now recommended as best practise as using the root FQDN can cause dns issues if you were to host your company website within the same network. to resolve this when building a new domain we add the prefix ‘ad’ or some organisations might use ‘corp.’<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

From the start menu search for ‘Active Directory Domains and Trusts’
<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Right Click on ‘Active Directory Domains and Trusts’ and go to ‘Properties’.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Add in your FQDN for example ‘hypervlab.co.uk’ then click ‘Apply’ and ‘Ok’.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Installing AzureAD Sync<\/strong><\/h2>\n\n\n\n

NOTE:<\/strong> For this setup, I’ve created a separate server dedicated for the AzureAD Sync Client. This is due to having multiple domain controllers within my ad.hypervlab.co.uk domain and not wanting to create a SPOF (Singel Point Of Failure) if one server dies or needs patching.

NOTE:<\/strong> Complete the Alternative UPN Suffix prior to starting the AzureAd Sync Installation.<\/p>\n\n\n\n

Download the ‘AzureADConnect.msi’ to your server. <\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Launch the AzureADConnect.msi setup executable.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Once the automated installation has completed the Azure AD Connect setup process will auto-launch<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Microsoft Azure Active Directory Connect Welcome Screen
Accept the ‘EULA’ and click Continue.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

For this setup, we will be using the: ‘Use express settings’ option.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Additional Software packages are installed.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Connect to the AzureAD with a Global Administrator Account.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Configure a Local Service Account
NOTE:<\/strong> As shown in the screenshot below the AzureAD Service account must be part of the Enterprise Admins Group.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Configure the AzureAD Sign-in information
NOTE:<\/strong> This screen was taken prior to configured the additional UPN of ‘hypervlab.co.uk’
just for a documentation purpose so if you get this error you know why. If you scroll back up to the FQDN Domains and UPN Subheading, there is a documented process on adding an additional UPN to your Active Directory Domain. <\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

As you can see now we have added the additional UPN we can now proceed, don’t forget to tick [X] ‘Continue without matching all UON Suffies to verified domains.’ then click ‘Next’.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

Pre-Flight Setup Completed, Lets Install!<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n
\"\"<\/figure>\n\n\n\n

Microsoft AzureAD Sync Installation Completed.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Going back to the Azure Portal we can now see that the Sync Status is: Enabled<\/strong>.<\/p>\n\n\n

\n
\"\"<\/figure><\/div>\n\n\n

This concludes this blog post, however, in the next one we will be checking out the Application and the Service and Sync Diagnostics Tools.<\/p>\n","protected":false},"excerpt":{"rendered":"

Reading Time: <\/span> 4<\/span> minutes<\/span><\/span>In this blog post, I will cover setting up and configuration of the Microsoft AzureAD Sync Tool. this blog post assumes that you already have an Active Directory and Azure\/O365 Environment. What is AzureAD Sync? Originally called DirSync, DirSync was a tool created by Microsoft and initially released on the 8 July 2013 to allow […]<\/p>\n","protected":false},"author":2,"featured_media":1588,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69,27,84,19],"tags":[98,178,93,198,170,99],"class_list":["post-1587","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-active-directory","category-microsoft-azure","category-microsoft-m365","category-windows-server-2019","tag-98","tag-ad","tag-azuread","tag-network","tag-networking","tag-windowsserver"],"yoast_head":"\nDeploying AzureAD Sync Tool - HypervLAB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hypervlab.co.uk\/?p=1587\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Deploying AzureAD Sync Tool - HypervLAB\" \/>\n<meta property=\"og:description\" content=\"Reading Time: 4 minutesIn this blog post, I will cover setting up and configuration of the Microsoft AzureAD Sync Tool. this blog post assumes that you already have an Active Directory and Azure\/O365 Environment. What is AzureAD Sync? Originally called DirSync, DirSync was a tool created by Microsoft and initially released on the 8 July 2013 to allow […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hypervlab.co.uk\/?p=1587\" \/>\n<meta property=\"og:site_name\" content=\"HypervLAB\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-19T22:14:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-13T16:36:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Simon Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/smoon_lee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587\",\"url\":\"https:\/\/hypervlab.co.uk\/?p=1587\",\"name\":\"Deploying AzureAD Sync Tool - HypervLAB\",\"isPartOf\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage\"},\"thumbnailUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png\",\"datePublished\":\"2019-07-19T22:14:13+00:00\",\"dateModified\":\"2023-07-13T16:36:50+00:00\",\"author\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\"},\"breadcrumb\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hypervlab.co.uk\/?p=1587\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage\",\"url\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png\",\"contentUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=1587#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hypervlab.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Deploying AzureAD Sync Tool\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hypervlab.co.uk\/#website\",\"url\":\"https:\/\/hypervlab.co.uk\/\",\"name\":\"HypervLAB\",\"description\":\"Blogging about all thing Microsoft\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hypervlab.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\",\"name\":\"Simon Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"caption\":\"Simon Lee\"},\"description\":\"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \\\"hypervlab\\\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.\",\"sameAs\":[\"https:\/\/hypervlab.co.uk\",\"https:\/\/www.linkedin.com\/in\/simon-john-lee\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee\"],\"url\":\"https:\/\/hypervlab.co.uk\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Deploying AzureAD Sync Tool - HypervLAB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hypervlab.co.uk\/?p=1587","og_locale":"en_GB","og_type":"article","og_title":"Deploying AzureAD Sync Tool - HypervLAB","og_description":"Reading Time: 4 minutesIn this blog post, I will cover setting up and configuration of the Microsoft AzureAD Sync Tool. this blog post assumes that you already have an Active Directory and Azure\/O365 Environment. What is AzureAD Sync? Originally called DirSync, DirSync was a tool created by Microsoft and initially released on the 8 July 2013 to allow […]","og_url":"https:\/\/hypervlab.co.uk\/?p=1587","og_site_name":"HypervLAB","article_published_time":"2019-07-19T22:14:13+00:00","article_modified_time":"2023-07-13T16:36:50+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png","type":"image\/png"}],"author":"Simon Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/smoon_lee","twitter_misc":{"Written by":"Simon Lee","Estimated reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hypervlab.co.uk\/?p=1587","url":"https:\/\/hypervlab.co.uk\/?p=1587","name":"Deploying AzureAD Sync Tool - HypervLAB","isPartOf":{"@id":"https:\/\/hypervlab.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage"},"image":{"@id":"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage"},"thumbnailUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png","datePublished":"2019-07-19T22:14:13+00:00","dateModified":"2023-07-13T16:36:50+00:00","author":{"@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359"},"breadcrumb":{"@id":"https:\/\/hypervlab.co.uk\/?p=1587#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hypervlab.co.uk\/?p=1587"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/?p=1587#primaryimage","url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png","contentUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2019\/07\/FeatureImage_DeployingAzureAD.png","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/hypervlab.co.uk\/?p=1587#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hypervlab.co.uk\/"},{"@type":"ListItem","position":2,"name":"Deploying AzureAD Sync Tool"}]},{"@type":"WebSite","@id":"https:\/\/hypervlab.co.uk\/#website","url":"https:\/\/hypervlab.co.uk\/","name":"HypervLAB","description":"Blogging about all thing Microsoft","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hypervlab.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359","name":"Simon Lee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","caption":"Simon Lee"},"description":"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \"hypervlab\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.","sameAs":["https:\/\/hypervlab.co.uk","https:\/\/www.linkedin.com\/in\/simon-john-lee\/","https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee"],"url":"https:\/\/hypervlab.co.uk\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1587"}],"version-history":[{"count":1,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1587\/revisions"}],"predecessor-version":[{"id":2847,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/1587\/revisions\/2847"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/media\/1588"}],"wp:attachment":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}