25,157 questions
Hi.
When you insert a global admin to create Azure Ad connect connector, the program create a new account exclusive to the process.
you can check her:
*the same location with another connector.
Regards
How to check which account is used for AD connect to synchronize objects?
Eaven HUANG
2,191
Reputation points
Dear All,
We have on-prem AD connect server used to synchronize all object from local AD to the cloud, we also enabled password writeback for uses to reset their password via Office 365 webpage.
My question is - where I can check which account is used to synchronize everything from local to cloud and which account is used for password writeback to our local DC?
Thanks a lot.
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Accepted answer
-
Fabricio Godoy 2,626 Reputation points2023-02-14T03:25:18.3233333+00:00 -
Eaven HUANG 2,191 Reputation points
2023-02-14T03:40:55.1633333+00:00 Thanks a lot @Fabricio Godoy !
So it has nothing to do with the account we used to enable Password Writeback feature, am I right?
I'm asking so because management is concerned if we used one admin account to enable features, then the password gets changed in the future, it will somehow disrupt the system.
-
Fabricio Godoy 2,626 Reputation points
2023-02-14T03:53:04.8066667+00:00 yes.
image the scenario:
you create Ad sync, and every 30 days need to change the password, or the person responsible left the company, or entered vacations and the account was blocked. MFa enabled in the environment or conditional access.several possibilities to create a big problem, right?
so...this account is create to avoid this.
Regards
Sign in to comment -