SCP de Microsoft Windows Server Active Directory

Question

Buenos días, Estamos revisando la posibilidad de activar el dominio Hibrido con entra ID y nos gustaría hacerlo de forma controlada. En la documentación proporcionada he podido revisar que existe la posibilidad haciendo cambios en la configuración SCP del Active Directory local. Ante esta configuración me surge una duda, si modifico los parámetros que me indica la documentación, afectaré a la sincronización de los usuarios que ya estamos realizando? Por otro lado, si activo la unión a Dominio hibrido, pero previamente he cambiado las OU de sincronización para que no incluir a los servidores, estos se sincronizaran o la opción de hybrid entra id join es independiente a estas opciones? Gracias.

Answer 1

Hello @Javier Jordan,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I understand that you are trying to enable SCP (Service Connection Point) configuration through Microsoft Entra Connect to make devices Microsoft Entra hybrid join machines. It seems you have a few questions regarding this setup:

1. Will modifying the parameters indicated in the documentation affect the synchronization of the users we are already syncing?

Modifying the parameters for SCP configuration in the local Active Directory should not affect the synchronization of users you're already syncing. SCP configuration is used by devices to discover your Azure AD tenant information and is unrelated to user synchronization.

2. If I enable Hybrid Domain Join but have previously excluded servers from the sync OUs, will the servers be synchronized, or is the Hybrid Entra ID join option independent of these settings?

Enabling Microsoft Entra hybrid join is independent of the sync OUs you’ve configured. If you have excluded servers from the sync OUs, they will not be synchronized, regardless of the hybrid join configuration. However, devices that are included in the sync OUs (such as Windows 10 or 11 machines) will still be eligible for Microsoft Entra hybrid join.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.