Is ad connect sync all the security group types to azure ad?

Question

Is ad connect sync all the security group types to azure ad?

Shravan 101

Ad connect will sync all the security group types. ( Domain local, Global, Universal) or it will synchronise universal group only?

Accepted answer

1 additional answer

Your answer

Answer 1

Marilee Turscak-MSFT 37,206 Microsoft Employee Moderator

To add to @Michael Durkan 's answer, all three group types/scopes (Universal, Global, and Domain Local) can be synchronized, but there are limitations around the domain local and global scopes.

If you use group writeback, for instance, all groups are written back with the group scope of universal.

Currently, Azure AD Connect does also not recognize nested groups for authorization.

Additionally, ADFS does not pull Domain Local groups, only universal and global groups. This is because domain local groups would be extremely slow since every domain would have to be queried as they aren't replicated.

Let me know if this helps and if you have further questions.

-

If the information helped you, please Accept the answer. This will help us as well as other members of the community who might be researching similar information.

Shravan 101 Reputation points

2022-12-30T20:11:31.37+00:00

Really thank you so much for your answer.
Shravan 101 Reputation points

2022-12-30T20:25:40.407+00:00

One more doubt Mr.Micheal. Can I sync the distribution group from AD to O365 with help of AD connect. After that can I upgrade that distribution to M365. Because I need SharePoint site and teams channel for that email id. Now it's M365 group. I enabled group write back option in AD connect. Is it will write back to AD as distribution list. I believe we can only sync distribution group from AD to O365 and upgrade to M365. Please answer this, the upgraded M365 will write back or not.
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-01-04T22:16:29.08+00:00

Microsoft 365 groups can be written back as distribution lists, security groups, or mail-enabled security groups.

Answer 2

Michael Durkan 12,241 MVP

Hi

Link below explains how groups are handled in Azure AD Connect:

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-user-and-contacts#groups

Hope this helps,

Thanks

Michael Durkan

If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!

Share via

Is ad connect sync all the security group types to azure ad?

1 additional answer

Your answer