

Sync failover or disaster recoveryĪzure AD Connect plays a key role in the provisioning process. If you use group filtering in production, you should transition to another filtering approach. Less "garbage" to carry forward from on-premises, for example, pollution of the global address list for on-premises service accounts that aren't relevant in the cloud.Removing known buckets of objects that aren't required to be synchronized has the following operational benefits: Synchronization scope and object filtering If you don't synchronize the forest users log into, then you should change the synchronization to come from the proper forest.


To enable all hybrid experiences, device-based security posture, and integration with Azure AD, it's required that you synchronize user accounts that your employees use to login to their desktops. Troubleshooting errors during synchronization provides an overview of different types of sync errors, some of the possible scenarios that cause those errors and potential ways to fix the errors. Long term unresolved synchronization errors can generate support incidents. Since automated tools such as IdFix and Azure AD Connect Health can generate a high volume of false positives, we recommend you identify synchronization errors that have been left unaddressed for more than 100 days by cleaning up those objects in error. Microsoft recommends you have a good baseline and understanding of the issues in your on-premises environment that can result in synchronization issues to the cloud. On-premises identity synchronization Identify and resolve synchronization issues

It's still important you set up these tasks to maintain your environment. Managing Azure Active Directory requires the continuous execution of key operational tasks and processes that may not be part of a rollout project. Key operational processes Assign owners to key tasks Organizations should continuously evaluate their identity practices as Microsoft products and services evolve over time. These recommendations are current as of the date of publishing but can change over time.
