Azure AD Connect Cloud Sync together with Azure AD DS

Question

Hi,

We have an onprem domain, where we are synchronizing users with Azure AD Connect Cloud sync with Password hash sync enabled.

However, we recently created a domain in Azure (with Azure AD DS) and when these users are synchronized from Azure AD to Azure AD DS, they are not able to logon. I suspect we are not synchronizing the NTLM and kerberos information for the users from onprem to azure AD and the information required to logon is therefore blank, but I cannot find any documentation regarding this, or anything telling me how to synchronize the user information that I am missing.

I know thast Azure AD Connect has a work around by running a script (ref. here ), but I do not think there is an equalient for Cloud Sync.

Any answers are greatly appriciated :)

Br

Fredrik

Answer 1

Oh boy. Just found this :(

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance#enable-user-accounts-for-azure-ad-ds

Answer 2

Hello, Have you changed the passwords for those users? Try changing one for a test user, let it sync to Azure, then wait 20 minutes then see if that user can logon to the AADDS domain:

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/synchronization