Best Practices for Installing Microsoft Entra Connect and Entra Cloud Sync

Question

I need to sync my groups from Microsoft Entra ID to my local Active Directory. I understand that this functionality is no longer available on Microsoft Entra Connect and is now only supported via Microsoft Entra Cloud Sync. Could someone provide guidance on the best practices for installing and configuring both Microsoft Entra Connect and Entra Cloud Sync to achieve this?

Answer 1

Hello TheCapricorn,

Since the your case is that you already has Microsoft Entra Connect working, you must also install Microsoft Entra Cloud Sync because you requires both features.

This means you requires the cloud sync to perform the group writeback. Then, strictly follow the guidelines in this document (https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/migrate-group-writeback) for migrating existing groups or OUs from AADC to cloud synchronization.

Please also note that the group writebackscope for cloud sync provisioning to AD can only include on-premises synced users and/or extra cloud-created security groups.

Kindly let me know if this work for you and please let me know if you have any further questions.

If I have answered your question, please accept this answer as a token of appreciation and don't forget to give a thumbs up for "Was it helpful" and "Accept the anser"!

Best regards,

Answer 2

Hello TheCapricorn,

Thanks for your question.

Yes, this is called Group writeback.

Using this feature requires Microsoft Entra ID P1 licenses

All the general requirements you will need can be found here:

https://learn.microsoft.com/en-us/entra/identity/hybrid/group-writeback-cloud-sync

If you need any specific further information please reply with details.

To configure Cloud sync, see: https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-configure

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola