Share via

Password syncing using Azure AD Connect

Robert Greenhoe 1 Reputation point
2021-12-22T15:27:12.143+00:00

We are implementing Azure AD Connect to sync passwords between our on premises AD servers and O365 email. We have some people that sign in with a generic account onsite and have an email address under their correct name. If I turn it on for those people, what will happen to their passwords? Will it stay with their current email password or will it try to create an AD Account for them and set a random password?

Thank you in advance for any help.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

1 answer

Sort by: Most helpful
  1. Alan Kinane 17,361 Reputation points MVP Volunteer Moderator
    2021-12-22T15:41:33.267+00:00

    You are syncing your existing Active Directory objects (user accounts) to Azure AD so the generic account will get synced to Azure AD and create a new Azure AD user account from this generic account if it does not exist already, you can't link this to multiple Azure AD accounts - it's 1:1.

    For a number of reasons, you really should have a separate user account for every single user. I'm sure there's a reason you are using generic accounts but I would try to overcome those issues and make sure every user is logging in with their own identity.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.