How to sync users Azure ad sign in details with On prem ad

Question

Hi Team

We have hybrid environment. Where we are running users accounts are bring created in on prem DC and it is getting sync to Azure ad. We are running one script in AD, if any users not logged-in since 60 days. It will be disabled and move to respective OU.

Now we have many users using Azure ad join devices only and they are working from home. There is no chance they can connect to office network or VPN. So, they have no option to sync with on prem AD. We can see the difference between Azure AD and on prem AD for the sign-in detail.

is there any way, we can write back sign-in details from Azure ad to AD for users using Azure ad connect or any other way, So we continue using the script.

Answer 1

Hi Ritesh,

As far as I know there is no way you can write back User is active or performing any activity on the AAD and write back to Onprem AD, there are some exchange attributes that I used for other project but it was oneoff for shared mailbox. IN this case you will need to update your script as this is not a solution in your scenario you are using AAD Joined device and users remotely loggin, so you need something setup in AAD instead of Onprem or tweak your onprem scrpts to accomodate this scenario - https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/reference-connect-sync-attributes-synchronized#exchange-hybrid-writeback

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.