View directory synchronization status in Microsoft 365
If you have integrated your on-premises Active Directory Domain Services (AD DS) with Azure Active Directory (Azure AD) by synchronizing your on-premises environment with Microsoft 365, you can also check the status of your synchronization.
View directory synchronization status
- Sign in to the Microsoft 365 admin center and choose DirSync Status on the home page.
- Alternately, you can go to Users > Active users, and on the Active users page, select the Elipse > Directory synchronization. On the Directory Synchronization pane, choose Go to DirSync management.
Information on the Manage directory synchronization page
The following table lists the features you can get information about on the page.
If there is a problem with your directory synchronization, the errors are listed on this page as well. For more information about different errors you might encounter, see Identify directory synchronization errors in Microsoft 365.
|Item||What it's for|
|Domains verified||Number of domains in your Microsoft 365 tenant that you have verified you own.|
|Domains not verified||Domains you have added, but not verified.|
|Directory sync enabled||True or False. Specifies whether you have enabled directory sync.|
|Latest directory sync||Last time directory sync ran. Will display a warning and a link to a troubleshooting tool if the last sync was more than three days ago.|
|Password sync enabled||True or False. Specifies whether you have password hash sync between our on-premises and your Microsoft 365 tenant.|
|Last Password Sync||Last time password hash sync ran. Will display a warning and a link to a troubleshooting tool if the last sync was more than three days ago.|
|Directory sync client version||Contains a download link if a new version of Azure AD Connect has been released.|
|Directory sync service account||Displays the name of your Microsoft 365 directory sync service account.|
Monitor synchronization health
In this section, you'll install an Azure AD Connect Health agent on each of your on-premises AD DS domain controllers to monitor your identity infrastructure and the synchronization services provided by Azure AD Connect. The monitoring information is made available in an Azure AD Connect Health portal, where you can view alerts, performance monitoring, usage analytics, and other information.
The key design decision of how to use Azure AD Connect Health is based on how you are using Azure AD Connect:
- If you’re using the managed authentication option, start with Using Azure AD Connect Health with sync to understand and configure Azure AD Connect Health.
- If you're synchronizing just the names of the accounts and groups using federated authentication with Active Directory Federation Services (AD FS), start with Using Azure AD Connect Health with AD FS to understand and configure Azure AD Connect Health.
When complete, you’ll have:
- The Azure AD Connect Health agent installed on your on-premises identity provider servers.
- The Azure AD Connect Health portal displaying the current state of your on-premises infrastructure and synchronization activities with the Azure AD tenant for your Microsoft 365 subscription.