How to Sync Entra ID Users to Active Directory and Manage Them
Asked by
CuriousCat412
Has anyone successfully used Entra Cloud Sync to create corresponding Active Directory (AD) user accounts for those currently using Entra ID as cloud-only users? I'm looking for advice on how to back-provision these users so that they are managed by AD. I've heard from Copilot that this is now a supported process, but it doesn't sound like it's straightforward. I'd really appreciate any insights or experiences you could share on this topic!
Answers
Unfortunately, it's not possible to directly sync cloud-only accounts back into AD. You would need to create those users on-prem first. As long as the UPNs match, the cloud accounts can be linked correctly. But be aware the passwords will always update to whichever is newer, so users might still need to reset theirs.
Reply to this answer
From what I've seen, the usual method involves creating accounts on-premises first and then syncing them, which means users would need to change their passwords. I haven't checked in about six months, though, so it's worth investigating if there have been updates since then.
Reply to this answer
The feature you're looking for is called User Writeback. It used to be part of Entra Connect but got deprecated earlier. I’m not aware of it moving to Cloud Sync either. It seems like your AI is a bit off here! You should plan on carefully making this sync happen since converting existing cloud-only accounts into hybrid models isn’t just a simple task.
Reply to this answer
According to a document I found, it seems like you can’t achieve this directly either. Creating the users on-prem and then linking them is the way to go. Here's the link to the Microsoft documentation: https://learn.microsoft.com/en-us/enctra/identity/hybrid/connect/how-to-connect-install-existing-tenant.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions