Microsoft Directory Synchronization Tool

Configuring the Microsoft Directory Synchronization tool (traditionally known as DirSync or Azure AD Connect, and modernly upgraded to Microsoft Entra Connect) allows you to synchronize your on-premises Active Directory (AD) identities with Microsoft Entra ID (formerly Azure AD). 1. Prerequisites and Preparation

Before installing the software, you must gather your environment’s information and administrative credentials:

Hybrid Identity Administrator Account: You need a cloud-only account with this role (or Global Administrator) in your Microsoft Entra ID tenant.

Enterprise Admin Account: You need an on-premises Active Directory domain or enterprise administrator account.

Dedicated Server: A server running Windows Server 2019 or later with the .NET Framework 4.8+ installed.

IdFix Tool: Run the Microsoft IdFix tool to identify and clean up duplicate entries, formatting issues, or invalid characters in your on-premises AD objects before attempting sync. 2. Download and Installation Steps

For standard organizations, utilizing the Express Settings configuration handles the vast majority of deployment scenarios automatically.

Download the tool: Sign in to the Microsoft 365 admin center, navigate to Users > Active Users, click the three dots (…) for Directory synchronization, and download the installation file.

Launch Installer: Run the AzureADConnect.msi file on your dedicated sync server as a local administrator.

License Terms: Review and agree to the license terms, then click Continue.

Select Setup Method: Click Use express settings to quickly configure user synchronization.

Connect to Microsoft Entra ID: Input your cloud Hybrid Identity Administrator username and password.

Connect to Active Directory Domain Services (AD DS): Enter your on-premises Enterprise Administrator credentials.

Verify Domain: Ensure that your on-premises UPN suffix matches a domain that you have verified inside the Microsoft Entra admin center. 3. Finalization and Initial Sync

Once credentials are accepted, the tool presents a confirmation layout: Set up directory synchronization for Microsoft 365