Install and Configure Azure AD Connect to Sync On Premises AD Users

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

We're going to see the steps on how to install and configure Azure Active Directory Connect tool on domain controller (Windows Server) to sync on premises active directory users with Azure Active Directory.

Prerequisites:

  • A domain-joined host server running Windows Server 2016 or greater with a minimum of 4-GB RAM and .NET 4.7.2+ runtime. One can visit this link for detailed configuration.
  • Windows 10 or later machine domain joined to domain controller.
  • User on Azure with Global Administrator role
  • Download .NET 4.7.2+ (or any latest) framework runtime: Download
  • Create a new EntraID tenant to Sync a new domain/OU and add the Global Admin user under this tenant
  • Make Google Chrome as your default browser instead of Edge for better experience
  • Create a user on your on Premise AD with appropriate permissions if using existing AD account
  1. Sign in to the Azure portal using an account with global administrator permissions
  2. Download Azure AD Connect setup
    Click on go to Azure AD Connect link or use this url to download directly to your domain controller.
  3. Run the Azure AD Connect MSI package on your domain controller
    If you get TLS error while starting AD Connect, use the following PowerShell script to enforce TLS 1.2:
    If (-Not (Test-Path
                        'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319'))
                        {
                        New-Item 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319'
                        -Force | Out-Null
                        }
                        [Rest of PowerShell script as provided]
  4. Agree to the license terms and click Continue
  5. Click Customize for custom installation
  6. Leave all options as default and click Install
  7. Select Password Hash Synchronization and click Next
  8. Enter Azure global administrator's username and password and click Next
  9. Add local active directory
    1. Under forest selector directory, click Add Directory
    2. Use local administrator's credentials (ex: authdc\administrator) or existing AD account
    3. Click OK then Next
  10. Select Continue without matching all UPN suffixes to verified domains checkbox and click Next
  11. On Domain and OU filtering, leave default settings to sync entire active directory data and click Next
  12. Leave default settings for basic setup and click Next
  13. Select any additional features if required on Optional features tab and click Next
  14. Enable synchronization and complete installation
    1. Select Start the synchronization process when configuration completes
    2. Click Install
    3. Once complete, click Exit

Verify the configuration:

  • In Azure portal, Azure AD Connect should show as enabled
  • Under Users, check for on-premises users with "On-premise sync enabled" status
  • On Windows Server, open Synchronization Service to verify synchronization is running