The AD Sync service is what provides ongoing, one-way, unobtrusive synchronization from your Active Directory (AD) environment to CloudPortal Services Manager (CPSM) at CDS. The AD Sync service allows you to synchronize your agency’s domain controllers to the domain controllers behind CPSM.
To accomplish a smooth transition, this service must be installed on all domain controllers in your AD forest. The operation of this service is unobtrusive to your network environment.
Your AD users’ user principal name (UPN) will be the username for Office 365. Your user accounts in CPSM will be regularly updated with any changes that have been saved in your local AD forest.
If there are any questions or concerns at any time during the execution of this document, please notify your project manager.
Before you begin the installation of AD Sync for your agency, please confirm for all staff that their UPN matches exactly their primary SMTP address. A CDS Windows engineering resource will be available to you if you need assistance with this step.
AD Sync may be installed on a domain controller running any version of Windows Server from 2003 R2 to 2016. However, if you have Windows Server 2012 or later domain controllers, you must raise the domain functionality level to Windows Server 2008 or later. If you do not, you will experience AD Sync instability.
If you are re-installing or upgrading AD Sync, there are some additional steps that need to be performed on each domain controller.
C:\Program Files\AD Sync)
The steps below should be completed on all domain controllers in your Active Directory forest. If any child domains exist, a listener should be placed in each domain.
AD Syncand add all migrating users to this group as members.
Ignorein the User out of scope action: setting.
AD Syncand click Find Now. This should locate the global security group that you created in Step 3 above.
C:\Program Files\AD Sync. It is recommended, though not required, that you accept the default.
ADSync.exe.config. This is found in the installation folder. By default, this location is
C:\Program Files\AD Sync.
10for the UploadMaxErrors element.
Please see the AD Sync FAQ.