possibibility to Sync Azure Entra ID to On Prem DC ?

NEXT2I SUPPORT 0

Hello,

I just want to know if it's possible to sync Entra ID users to an new Domain Controller that I created to replicate all users on it?

Thanks in advance.

Cordially

1 answer

Akpesiri Ogbebor 300 Reputation points

2024-08-30T14:41:32.2633333+00:00
Hello @NEXT2I SUPPORT

Thank you for posting this in Microsoft Q&A.

I understand you want to know if it’s possible to sync users from Entra ID to Local Domain Controller.

It's not possible to directly sync Microsoft Entra ID (formerly Azure AD) users to an on-premises Domain Controller in the way you describe. Typically, synchronization flows in the opposite direction: from on-premises Active Directory (AD) to Microsoft Entra ID using tools like Azure AD Connect.

If you're looking to have your Entra ID users available on a new Domain Controller, you'd generally do the following:

Azure AD Domain Services (AAD DS): If you need your cloud-only users (those that exist only in Entra ID and not in on-prem AD) to be available in a domain-joined environment, you can deploy Azure AD Domain Services. AAD DS provides domain services (like domain join, group policy, etc.) in the cloud and allows Entra ID users to authenticate to those services. However, this does not sync users back to an on-prem Domain Controller.

This is not supported natively if you want to sync cloud-only users from Entra ID to on-prem AD. If that's your goal, you must script or manually create those users in your on-premises AD.

Thanks.

Siri.
Please sign in to rate this answer.
NEXT2I SUPPORT 0 Reputation points

2024-09-02T07:38:39.38+00:00

Hello,

Thank you for the update and clarification.

Anyway, is there any solution to do a sync between the Azure Entra ID to the On Prem DC ?

Because All of my users are already deployed on the Entra ID and I just installed a fresh Domain Controller and there is nothing inside (no users).

I just want to know if there is any solution to export and import users on the Domain Controller and do a synchronisation with the Entra ID Azure Connect tool ?

I don't understand what you mean by deploying the AAD DS on the Windows Server because the AD Service is already deployed and installed.

Thanks in advance.

Akpesiri Ogbebor 300 Reputation points

2024-09-03T12:07:58.44+00:00

You can read more on AADDS here, It is also known as Microsoft Entra Domain Services

Akpesiri Ogbebor 300 Reputation points

2024-09-03T12:13:28.7833333+00:00

Hi @NEXT2I SUPPORT

There is a tool called Azure AD Connect that only syncs from a local domain controller to Azure. It doesn't sync from Azure AD to on-prem; normally, Azure AD Connect synchronizes an on-premises environment to the cloud.

It depends on what you want to achieve. With the information you provided, you could export users from Azure AD and then do a bulk import into Active Directory, but you will need to reset the passwords.

Below are some documentation to help you.

https://learn.microsoft.com/en-us/entra/identity/users/users-bulk-download

https://www.itprc.com/how-to-create-bulk-users-in-active-directory/

https://www.filecloud.com/blog/2022/04/import-users-to-ad-via-powershell/#.ZD6IG3ZBxPY

Please don't hesitate to reach out if you need further assistance.

Thanks

Siri

Givary-MSFT 32,291 Reputation points Microsoft Employee

2024-09-04T05:37:11.01+00:00

@NEXT2I SUPPORT Similar ask has been discussed here - https://learn.microsoft.com/en-us/answers/questions/1824405/microsoft-entra-id-to-ad-sync-user-on-azure-ad-syn there is no option to sync user object from Entra ID to on-premises AD.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

possibibility to Sync Azure Entra ID to On Prem DC ?

1 answer

Your answer