[OT] Office 365 Azure AD sync
Hey all, I've recently switched from Google to Office 365, with user accounts on the Azure AD side of things. I then thought I should set up the Azure AD connect thing which syncs the local AD accounts up to Azure AD but I discovered does not currently sync accounts back down to the local AD. Kind of an OH CRAP moment when I realised the email accounts I've set up that are now functioning in the cloud quite nicely thank you very much are pretty much useless for authenticating with the local resources. It would have been a nice touch. It was there in the preview (forget the name now, something like UserSyncback?) and hopefully it is coming soon. Anyone else hit this and have a work around? I could change all of the email accounts over to the local accounts that have been synced up to Azure but then I have the issue of having to move/migrate all of the mail between accounts. Not sure how trivial that is, I might be able to migrate from cloud account to local account (the cloud copy) and then remove all of the cloud accounts and switch the email address over. Other than that small issue, have been happy with it. The users however struggle with change. /me facepalm. Always the users. thanks! Stephen
Re: [OT] Office 365 Azure AD sync
First question is if you still need local AD. With vpns and AD services on AAD, many don't now. If you do, ADFS allows for two way traversal. Are you currently using ADConnect or the older Dirsync ? Regards Greg Dr Greg Low SQL Down Under +61 419201410 1300SQLSQL (1300775775) On 2 Dec 2015, at 12:59 PM, Stephen Price mailto:step...@lythixdesigns.com>> wrote: Hey all, I've recently switched from Google to Office 365, with user accounts on the Azure AD side of things. I then thought I should set up the Azure AD connect thing which syncs the local AD accounts up to Azure AD but I discovered does not currently sync accounts back down to the local AD. Kind of an OH CRAP moment when I realised the email accounts I've set up that are now functioning in the cloud quite nicely thank you very much are pretty much useless for authenticating with the local resources. It would have been a nice touch. It was there in the preview (forget the name now, something like UserSyncback?) and hopefully it is coming soon. Anyone else hit this and have a work around? I could change all of the email accounts over to the local accounts that have been synced up to Azure but then I have the issue of having to move/migrate all of the mail between accounts. Not sure how trivial that is, I might be able to migrate from cloud account to local account (the cloud copy) and then remove all of the cloud accounts and switch the email address over. Other than that small issue, have been happy with it. The users however struggle with change. /me facepalm. Always the users. thanks! Stephen
Re: [OT] Office 365 Azure AD sync
Just set it up, and made sure I was going with the new one. ADConnect. I have a Synology NAS which has some file shares, and have a local AD server (which also has a share for an application). NAS is set up to sync with the local AD for user accounts, but doesn't look like it supports Azure AD yet. Not had a look at ADFS yet, have been out of the Infrastructure a while now. So I could grant the AAD users access to the local AD? Would get around the need to sync those users into the local AD if that's doable. thanks! Stephen From: ozdotnet-boun...@ozdotnet.com on behalf of Greg Low (??) Sent: Wednesday, 2 December 2015 12:05 PM To: ozDotNet Subject: Re: [OT] Office 365 Azure AD sync First question is if you still need local AD. With vpns and AD services on AAD, many don't now. If you do, ADFS allows for two way traversal. Are you currently using ADConnect or the older Dirsync ? Regards Greg Dr Greg Low SQL Down Under +61 419201410 1300SQLSQL (1300775775) On 2 Dec 2015, at 12:59 PM, Stephen Price mailto:step...@lythixdesigns.com>> wrote: Hey all, I've recently switched from Google to Office 365, with user accounts on the Azure AD side of things. I then thought I should set up the Azure AD connect thing which syncs the local AD accounts up to Azure AD but I discovered does not currently sync accounts back down to the local AD. Kind of an OH CRAP moment when I realised the email accounts I've set up that are now functioning in the cloud quite nicely thank you very much are pretty much useless for authenticating with the local resources. It would have been a nice touch. It was there in the preview (forget the name now, something like UserSyncback?) and hopefully it is coming soon. Anyone else hit this and have a work around? I could change all of the email accounts over to the local accounts that have been synced up to Azure but then I have the issue of having to move/migrate all of the mail between accounts. Not sure how trivial that is, I might be able to migrate from cloud account to local account (the cloud copy) and then remove all of the cloud accounts and switch the email address over. Other than that small issue, have been happy with it. The users however struggle with change. /me facepalm. Always the users. thanks! Stephen
Re: [OT] Office 365 Azure AD sync
Directory services for AAD had just been pushed out so you should be able to just use it for all AD needs. We've domain joined local servers to it just fine. Regards Greg Dr Greg Low SQL Down Under +61 419201410 1300SQLSQL (1300775775) On 2 Dec 2015, at 4:03 PM, Stephen Price mailto:step...@lythixdesigns.com>> wrote: Just set it up, and made sure I was going with the new one. ADConnect. I have a Synology NAS which has some file shares, and have a local AD server (which also has a share for an application). NAS is set up to sync with the local AD for user accounts, but doesn't look like it supports Azure AD yet. Not had a look at ADFS yet, have been out of the Infrastructure a while now. So I could grant the AAD users access to the local AD? Would get around the need to sync those users into the local AD if that's doable. thanks! Stephen From: ozdotnet-boun...@ozdotnet.com<mailto:ozdotnet-boun...@ozdotnet.com> mailto:ozdotnet-boun...@ozdotnet.com>> on behalf of Greg Low (罗格雷格博士) mailto:g...@greglow.com>> Sent: Wednesday, 2 December 2015 12:05 PM To: ozDotNet Subject: Re: [OT] Office 365 Azure AD sync First question is if you still need local AD. With vpns and AD services on AAD, many don't now. If you do, ADFS allows for two way traversal. Are you currently using ADConnect or the older Dirsync ? Regards Greg Dr Greg Low SQL Down Under +61 419201410 1300SQLSQL (1300775775) On 2 Dec 2015, at 12:59 PM, Stephen Price mailto:step...@lythixdesigns.com>> wrote: Hey all, I've recently switched from Google to Office 365, with user accounts on the Azure AD side of things. I then thought I should set up the Azure AD connect thing which syncs the local AD accounts up to Azure AD but I discovered does not currently sync accounts back down to the local AD. Kind of an OH CRAP moment when I realised the email accounts I've set up that are now functioning in the cloud quite nicely thank you very much are pretty much useless for authenticating with the local resources. It would have been a nice touch. It was there in the preview (forget the name now, something like UserSyncback?) and hopefully it is coming soon. Anyone else hit this and have a work around? I could change all of the email accounts over to the local accounts that have been synced up to Azure but then I have the issue of having to move/migrate all of the mail between accounts. Not sure how trivial that is, I might be able to migrate from cloud account to local account (the cloud copy) and then remove all of the cloud accounts and switch the email address over. Other than that small issue, have been happy with it. The users however struggle with change. /me facepalm. Always the users. thanks! Stephen