{"id":271,"date":"2021-10-21T03:41:03","date_gmt":"2021-10-21T02:41:03","guid":{"rendered":"http:\/\/192.168.8.123\/?p=271"},"modified":"2022-04-22T17:17:53","modified_gmt":"2022-04-22T17:17:53","slug":"implement-directory-synchronization","status":"publish","type":"post","link":"https:\/\/exceedthecloud.com\/?p=271","title":{"rendered":"Implement Directory Synchronization"},"content":{"rendered":"\n<p>Azure Active Directory (Azure AD) Connect (formerly known as the Directory Synchronization tool, Directory Sync tool, or the DirSync.exe tool) is an application that you install on a domain-joined server to synchronize your on-premises Active Directory Domain Services (AD DS) users to the Azure AD tenant.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>This labs are a replay of exercises done during my course on AZ-500 Microsoft Azure Security Technologies and is a proof of concept demonstrating how to integrate on-premises Active Directory Domain Services (AD DS) environment with an Azure Active Directory (Azure AD) tenant. Specifically, you want to:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Implement a single-domain AD DS forest by deploying an Azure VM hosting an AD DS domain controller<\/li><li>Create and configure an Azure AD tenant<\/li><li>Synchronize the AD DS forest with the Azure AD tenant<\/li><\/ul>\n\n\n\n<p><strong>objectives<\/strong><\/p>\n\n\n\n<p>In this lab, you will complete the following labs:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Practical Labs 1: Deploy an Azure VM hosting an Active Directory domain controller<\/li><li>Practical Labs 2: Create and configure an Azure Active Directory tenant<\/li><li>Practical Labs 3: Synchronize Active Directory forest with an Azure Active Directory tenant<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>Prerequisites for this lab : PowerShell \/ Azure Account \/&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/github.com\/marcelin-ndjila\/saves\/blob\/master\/Azurelabs02.zip\" target=\"_blank\">Downlo<\/a><a href=\"https:\/\/github.com\/marcelin-ndjila\/Practical-Labs-Series\/blob\/master\/Azurelabs02.zip\" target=\"_blank\" rel=\"noreferrer noopener\">ad Labs Files here<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Practical Labs 1: Deploy an Azure VM hosting an Active Directory domain controller<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Task 1: Identify an available DNS name for an Azure VM deployment<\/li><li>Task 2: Use an ARM template to deploy an Azure VM hosting an Active Directory domain controller<\/li><\/ul>\n\n\n\n<p><strong>Task 1: Identify an available DNS name for an Azure VM deployment<\/strong><\/p>\n\n\n\n<p>In this task, you will identify a DNS name for your Azure VM deployment.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Sign-in to the Azure portal <strong>https:\/\/portal.azure.com\/<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: Sign in to the Azure portal using an account that has the Owner or Contributor role in the Azure subscription you are using for this lab.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"2\"><li>Open the Cloud Shell by clicking the first icon in the top right of the Azure Portal. If prompted, click <strong>PowerShell<\/strong> and <strong>Create storage<\/strong>.<\/li><li>Ensure <strong>PowerShell<\/strong> is selected in the drop-down menu in the upper-left corner of the Cloud Shell pane.<\/li><li>In the PowerShell session within the Cloud Shell pane, run the following to identify an available DNS name you can use for an Azure VM deployment in the next task of this exercise:<\/li><\/ul>\n\n\n\n<p>code<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Test-AzDnsAvailability -DomainNameLabel exceedlab09142021 -Location 'East US'<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Note<\/strong>: Replace the &lt;custom-label&gt; placeholder with a valid DNS name that is likely to be globlly unique. Replace the &lt;location&gt; placeholder with the name of the region into which you want to deploy the Azure VM that will host the Active Directory domain controller you will use in this lab.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: To identify Azure regions where you can provision Azure VMs, refer to <a href=\"https:\/\/azure.microsoft.com\/en-us\/regions\/offers\/\"><strong>https:\/\/azure.microsoft.com\/en-us\/regions\/offers\/<\/strong><\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img01-3.png\" alt=\"\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"4\"><li>Verify that the command returned <strong>True<\/strong>. If not, rerun the same command with a different value of the &lt;custom-label&gt; until the command returns <strong>True<\/strong>.<\/li><li>Record the value of the exceedlab09142021 that resulted in the successful outcome. You will need it in the next task.<\/li><li>Close the Cloud Shell.<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Task 2: Use an ARM template to deploy an Azure VM hosting an Active Directory domain controller<\/strong><\/p>\n\n\n\n<p>In this task, you will deploy an Azure VM that will host an Active Directory domain controller<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Open another browser tab in the same browser window and navigate to the <a href=\"https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/master\/application-workloads\/active-directory\/active-directory-new-domain\">https:\/\/github.com\/Azure\/azure-quickstart-templates\/tree\/master\/application-workloads\/active-directory\/active-directory-new-domain<\/a>.<\/li><li>On the <strong>Create a new Windows VM and create a new AD Forest, Domain and DC<\/strong> page, click <strong>Deploy to Azure<\/strong>. This will automatically redirect the browser to the <strong>Create an Azure VM with a new AD Forest<\/strong> blade in the Azure portal.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img02-3-1024x528.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>On the <strong>Create an Azure VM with a new AD Forest<\/strong> blade, click <strong>Edit parameters<\/strong>.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img03-3.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>On the <strong>Edit parameters<\/strong> blade, click <strong>Load file<\/strong>, in the <strong>Open<\/strong> dialog box, click <strong>\\\\AllFiles\\Labs\\06\\active-directory-new-domain\\azuredeploy.parameters.json<\/strong>, click <strong>Open<\/strong>, and then click <strong>Save<\/strong>.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img04-3-1024x692.png\" alt=\"\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>Create an Azure VM with a new AD Forest<\/strong> blade, specify the following settings (leave others with their existing values):<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Subscription<\/td><td>the name of you Azure subscription<\/td><\/tr><tr><td>Resource group<\/td><td>click <strong>Create new<\/strong> and type the name <strong>rg-exceed13102021<\/strong><\/td><\/tr><tr><td>Region<\/td><td>the Azure region you identified in the previous task<\/td><\/tr><tr><td>Admin Username<\/td><td><strong>exceedstudent<\/strong><\/td><\/tr><tr><td>Admin Password<\/td><td><strong>Pa55w.rd1234<\/strong><\/td><\/tr><tr><td>Domain Name<\/td><td><strong>adatum.com<\/strong><\/td><\/tr><tr><td>Dns Prefix<\/td><td>Exceedlab09142021<\/td><\/tr><tr><td>VM Size<\/td><td><strong>Standard_D2s_v3<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"2\"><li>On the <strong>Create an Azure VM with a new AD Forest<\/strong> blade, click <strong>Review + create<\/strong>, and then click <strong>Create<\/strong>.<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img05-3-1024x858.png\" alt=\"\"\/><\/figure>\n\n\n\n<p><strong>Note<\/strong>: Do not wait for the deployment to complete but instead proceed to the next exercise. The deployment might take about 15 minutes. You will use the virtual machine deployed in this task in the third exercise of this lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img06-2.png\" alt=\"\"\/><\/figure>\n\n\n\n<p>Result: After you completed this exercise, you have initiated deployment of an Azure VM that will host an Active Directory domain controller by using an Azure Resource Manager template<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Practical Labs 2: Create and configure an Azure Active Directory tenant<\/strong><\/p>\n\n\n\n<p>In this exercise, you will complete the following tasks:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Task 1: Create an Azure Active Directory (AD) tenant<\/li><li>Task 2: Add a custom DNS name to the new Azure AD tenant<\/li><li>Task 3: Create an Azure AD user with the Global Administrator role<\/li><\/ul>\n\n\n\n<p><strong>Task 1: Create an Azure Active Directory (AD) tenant<\/strong><\/p>\n\n\n\n<p>In this task, you will create a new Azure AD tenant to use in this lab.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In the Azure portal, in the <strong>Search resources, services, and docs<\/strong> text box at the top of the Azure portal page, type <strong>Azure Active Directory<\/strong> and press the <strong>Enter<\/strong> key.<\/li><li>On the blade displaying <strong>Overview<\/strong> of your current Azure AD tenant, click <strong>Manage tenant<\/strong>, and then on the next screen, click <strong>+ Create<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img07-2-1024x612.png\" alt=\"\"\/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img08-2-1024x222.png\" alt=\"\"\/><\/figure>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li>On the <strong>Basics<\/strong> tab of the <strong>Create a directory<\/strong> blade, ensure that the option <strong>Azure Active Directory<\/strong> is selected and click <strong>Next: Configuration &gt;<\/strong>.<\/li><li>On the <strong>Configuration<\/strong> tab of the <strong>Create a directory<\/strong> blade, specify the following settings:<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Organization name<\/td><td><strong>AdatumSync<\/strong><\/td><\/tr><tr><td>Initial domain name<\/td><td>a unique name consisting of a combination of letters and digits<\/td><\/tr><tr><td>Country or region<\/td><td><strong>United States<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Note<\/strong>: Record the initial domain name. You will need it later in this lab.<\/li><li><strong>Note<\/strong>: The green check mark in the <strong>Initial domain name<\/strong> text box will indicate whether the domain name you typed in is valid and unique. (Record your initial domain name for later use).<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img decoding=\"async\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img09-2-1024x480.png\" alt=\"\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Click <strong>Review + create<\/strong> and then click <strong>Create<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: Wait for the new tenant to be created. Use the <strong>Notification<\/strong> icon to monitor the deployment status.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"478\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6-1024x478.png\" alt=\"\" class=\"wp-image-2080\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6-1024x478.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6-300x140.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6-768x358.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6-1536x717.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img10-2-6.png 1856w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Validate the check &#8211; you are not a robot<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"570\" height=\"323\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img11-2-6.png\" alt=\"\" class=\"wp-image-2084\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img11-2-6.png 570w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img11-2-6-300x170.png 300w\" sizes=\"auto, (max-width: 570px) 100vw, 570px\" \/><\/figure>\n\n\n\n<p>Click on Submit for the creation of the tenant<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Task 2: Add a custom DNS name to the new Azure AD tenant<\/strong><\/p>\n\n\n\n<p>In this task, you will add your custom DNS name to the new Azure AD tenant.<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li>In the Azure portal, in the toolbar, click the <strong>Directory + subscription<\/strong> icon, located to the right of the Cloud Shell icon.<\/li><li>In the <strong>Directory + subscription<\/strong> blade, click the newly created tenant, <strong>AdatumSync<\/strong>.<\/li><\/ol>\n\n\n\n<p><strong>Note<\/strong>: You may need to refresh the browser window if the <strong>AdatumSync<\/strong> entry does not appear in the <strong>Directory + subscription<\/strong> filter list.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"288\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6-1024x288.png\" alt=\"\" class=\"wp-image-2088\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6-1024x288.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6-300x84.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6-768x216.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6-1536x432.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img12-2-6.png 1861w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click on Switch<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>AdatumSync | Azure Active Directory<\/strong> blade, in the <strong>Manage<\/strong> section, click <strong>Custom domain names<\/strong>.<\/li><\/ul>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"598\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-2-6-1024x598.png\" alt=\"\" class=\"wp-image-2092\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-2-6-1024x598.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-2-6-300x175.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-2-6-768x449.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img13-2-6.png 1494w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>AdatumSync | Custom domain names<\/strong> blade, click <strong>+ Add custom domain<\/strong>.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"255\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6-1024x255.png\" alt=\"\" class=\"wp-image-2096\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6-1024x255.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6-300x75.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6-768x191.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6-1536x383.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img14-2-6.png 1914w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>Custom domain name<\/strong> blade, in the <strong>Custom domain name<\/strong> text box, type <strong>adatum.com<\/strong> and click <strong>Add Domain<\/strong>.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"477\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5-1024x477.png\" alt=\"\" class=\"wp-image-2098\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5-1024x477.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5-300x140.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5-768x358.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5-1536x716.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img15-1-5.png 1906w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>adatum.com<\/strong> blade, review the information necessary to perform verification of the Azure AD domain name.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"210\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5-1024x210.png\" alt=\"\" class=\"wp-image-2100\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5-1024x210.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5-300x62.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5-768x158.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5-1536x315.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img16-1-5.png 1657w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Note<\/strong>: You will not be able to complete the validation process because you do not own the <strong>adatum.com<\/strong> DNS domain name. This will not prevent you from synchronizing the <strong>adatum.com<\/strong> AD DS domain with the Azure AD tenant. You will use for this purpose the initial DNS name of the Azure AD tenant (the name ending with the <strong>onmicrosoft.com<\/strong> suffix), which you identified in the previous task. However, keep in mind that, as a result, the DNS domain name of the AD DS domain and the DNS name of the Azure AD tenant will differ. This means that Adatum users will need to use different names when signing in to the AD DS domain and when signing in to Azure AD tenant.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Task 3: Create an Azure AD user with the Global Administrator role<\/strong><\/p>\n\n\n\n<p>In this task, you will add a new Azure AD user and assign them to the Global Administrator role.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>AdatumSync<\/strong> Azure AD tenant blade, in the <strong>Manage<\/strong> section, click <strong>Users<\/strong>.<\/li><li>On the <strong>Users | All users<\/strong> blade, click <strong>+ New User<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"164\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5-1024x164.png\" alt=\"\" class=\"wp-image-2102\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5-1024x164.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5-300x48.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5-768x123.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5-1536x245.png 1536w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img17-1-5.png 1628w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>New user<\/strong> blade, ensure that the <strong>Create user<\/strong> option is selected, specify the following settings (leave all others with their default values) and click <strong>Create<\/strong>:<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>User name<\/td><td><strong>syncadmin<\/strong><\/td><\/tr><tr><td>Name<\/td><td><strong>syncadmin<\/strong><\/td><\/tr><tr><td>Password<\/td><td>ensure that the option <strong>Auto-generate password<\/strong> is selected and click <strong>Show Password<\/strong><\/td><\/tr><tr><td>Groups<\/td><td><strong>0 groups selected<\/strong><\/td><\/tr><tr><td>Roles<\/td><td>click <strong>User<\/strong>, then click <strong>Global administrator<\/strong>, and click <strong>Select<\/strong><\/td><\/tr><tr><td>Usage Location<\/td><td><strong>United States<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Note<\/strong>: Record the full user name. You can copy its value by clicking the <strong>Copy to clipboard<\/strong> button on the right hand side of the drop-down list displaying the domain name.<\/li><li><strong>Note<\/strong>: Record the user\u2019s password. You will need this later in this lab.<\/li><li><strong>Note<\/strong>: An Azure AD user with the Global Administrator role is required in order to implement Azure AD Connect.<\/li><\/ul>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\" start=\"5\"><li>Open an InPrivate browser window.<\/li><li>Navigate to the Azure portal and sign in using the <strong>syncadmin<\/strong> user account. When prompted, change the password you recorded earlier in this task to <strong>Pa55w.rd1234<\/strong>.<\/li><\/ol>\n\n\n\n<p><strong>Note<\/strong>: To sign in you will need to provide a fully qualified name of the <strong>syncadmin<\/strong> user account, including the Azure AD tenant DNS domain name, which you recorded earlier in this task. This user name is in the format syncadmin@&lt;your_tenant_name&gt;.onmicrosoft.com, where &lt;your_tenant_name&gt; is the placeholder representing your unique Azure AD tenant name.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"7\"><li>Sign out as <strong>syncadmin<\/strong> and close the InPrivate browser window.<\/li><\/ul>\n\n\n\n<p><strong>Result<\/strong>: After you completed this exercise, you have created an Azure AD tenant, added a custom DNS name to the new Azure AD tenant, and created an Azure AD user with the Global Administrator role.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Practical Labs 3: Synchronize Active Directory forest with an Azure Active Directory tenant<\/strong><\/p>\n\n\n\n<p>In this exercise, you will complete the following tasks:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Task 1: Prepare AD DS for directory synchronization<\/li><li>Task 2: Install Azure AD Connect<\/li><li>Task 3: Verify directory synchronization<\/li><\/ul>\n\n\n\n<p><strong>Task 1: Prepare AD DS for directory synchronization<\/strong><\/p>\n\n\n\n<p>In this task, you will connect to the Azure VM running AD DS domain controller and create a directory synchronization account.<\/p>\n\n\n\n<p>Before you start this task, ensure that the template deployment you started in the first exercise of this lab has completed.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In the Azure portal, set the <strong>Directory + subscription<\/strong> filter to the the Azure AD tenant associated with the Azure subscription into which you deployed the Azure VM in the first exercise of this lab.<\/li><li>In the Azure portal, in the <strong>Search resources, services, and docs<\/strong> text box at the top of the Azure portal page, type <strong>Virtual machines<\/strong> and press the <strong>Enter<\/strong> key.<\/li><li>On the <strong>Virtual machines<\/strong> blade, click the <strong>adVM<\/strong> entry.<\/li><li>On the <strong>adVM<\/strong> blade, click <strong>Connect<\/strong> and, in the drop down menu, click <strong>RDP<\/strong>.<\/li><li>In the <strong>IP address<\/strong> parameter, select <strong>Load balancer public IP address<\/strong>, then click <strong>Download RDP File<\/strong> and use it to connect to the <strong>adVM<\/strong> Azure VM via Remote Desktop. When prompted to authenticate, provide the following credntials:<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>User name<\/td><td><strong>exceedstudent<\/strong><\/td><\/tr><tr><td>Password<\/td><td><strong>Pa55w.rd1234<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Note<\/strong>: Wait for the Remote Desktop session and <strong>Server Manager<\/strong> to load.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: The following steps are performed in the Remote Desktop session to the <strong>adVM<\/strong> Azure VM.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"799\" height=\"607\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img18-1-6.png\" alt=\"\" class=\"wp-image-2104\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img18-1-6.png 799w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img18-1-6-300x228.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img18-1-6-768x583.png 768w\" sizes=\"auto, (max-width: 799px) 100vw, 799px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In <strong>Server Manager<\/strong>, click <strong>Local Server<\/strong> and then click <strong>IE Enhanced Security Configuration<\/strong>.<\/li><li>In the <strong>Internet Explorer Enhanced Security Configuration<\/strong> dialog box, set both options to <strong>Off<\/strong> and click <strong>OK<\/strong>.<\/li><li>Start Internet Explorer, navigate to <a href=\"https:\/\/microsoftlearning.github.io\/AZ500-AzureSecurityTechnologies\/Instructions\/Labs\/%60https:\/www.microsoft.com\/en-us\/edge\/business\/download%60\">https:\/\/www.microsoft.com\/en-us\/edge\/business\/download<\/a>, download Microsoft Edge installation binaries, run the installation, and configure the web browser with the default settings.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img19-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2106\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img19-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img19-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img19-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img19-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In <strong>Server Manager<\/strong>, click <strong>Tools<\/strong> and, in the drop-down menu, click <strong>Active Directory Administrative Center<\/strong>.<\/li><li>In <strong>Active Directory Administrative Center<\/strong>, click <strong>adatum (local)<\/strong>, in the <strong>Tasks<\/strong> pane, click <strong>New<\/strong>, and, in the cascading menu, click <strong>Organizational Unit<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img20-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2108\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img20-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img20-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img20-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img20-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In the <strong>Create Organizational Unit<\/strong> window, in the <strong>Name<\/strong> text box, type <strong>ToSync<\/strong> and click <strong>OK<\/strong>.<\/li><li>Double-click the newly created <strong>ToSync<\/strong> organizational unit such that its content appears in the details pane of the Active Directory Administrative Center console.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img21-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2110\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img21-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img21-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img21-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img21-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In the <strong>Tasks<\/strong> pane, within the <strong>ToSync<\/strong> section, click <strong>New<\/strong>, and, in the cascading menu, click <strong>User<\/strong>.<\/li><li>In the <strong>Create User<\/strong> window, create a new user account with the following settings (leave others with their existing values) and click <strong>OK<\/strong>:<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Full Name<\/td><td><strong>aduser1<\/strong><\/td><\/tr><tr><td>User UPN logon<\/td><td><strong>aduser1<\/strong><\/td><\/tr><tr><td>User SamAccountName logon<\/td><td><strong>aduser1<\/strong><\/td><\/tr><tr><td>Password<\/td><td><strong>Pa55w.rd1234<\/strong><\/td><\/tr><tr><td>Other password options<\/td><td><strong>Password never expires<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img22-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2112\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img22-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img22-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img22-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img22-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Task 2: Install Azure AD Connect<\/strong><\/p>\n\n\n\n<p>In this task, you will install AD Connect on the virtual machine.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Within the Remote Desktop session to <strong>adVM<\/strong>, use Microsoft Edge to navigate to the <a href=\"https:\/\/portal.azure.com\">Azure portal<\/a>, and sign in by using the <strong>syncadmin<\/strong> user account you created the previous exercise. When prompted, specify the full user name you recorded and the <strong>Pa55w.rd1234<\/strong> password.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img23-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2114\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img23-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img23-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img23-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img23-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>In the Azure portal, in the <strong>Search resources, services, and docs<\/strong> text box at the top of the Azure portal page, type <strong>Azure Active Directory<\/strong> and press the <strong>Enter<\/strong> key.<\/li><li>In the Azure portal, on the <strong>AdatumSync | Overview<\/strong> blade, click <strong>Azure AD Connect<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img24-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2116\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img24-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img24-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img24-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img24-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>AdatumSync | Azure AD Connect<\/strong> blade, click the <strong>Download Azure AD Connect<\/strong> link. You will be redirected to the <strong>Microsoft Azure Active Directory Connect<\/strong> download page.<\/li><li>On the <strong>Microsoft Azure Active Directory Connect<\/strong> download page, click <strong>Download<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img25-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2118\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img25-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img25-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img25-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img25-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>When prompted, click <strong>Run<\/strong> to start the <strong>Microsoft Azure Active Directory Connect<\/strong> wizard.<\/li><li>On the <strong>Welcome to Azure AD Connect<\/strong> page of the <strong>Microsoft Azure Active Directory Connect<\/strong> wizard, click the checkbox <strong>I agree to the license terms and privacy notice<\/strong> and click <strong>Continue<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img26-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2120\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img26-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img26-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img26-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img26-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>Express Settings<\/strong> page of the <strong>Microsoft Azure Active Directory Connect<\/strong> wizard, click the <strong>Customize<\/strong> option.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img27-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2122\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img27-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img27-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img27-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img27-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>Install required components<\/strong> page, leave all optional configuration options deselected and click <strong>Install<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img28-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2124\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img28-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img28-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img28-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img28-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>User sign-in<\/strong> page, ensure that only the <strong>Password Hash Synchronization<\/strong> is enabled and click <strong>Next<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img29-1-6-1024x576.png\" alt=\"\" class=\"wp-image-2126\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img29-1-6-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img29-1-6-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img29-1-6-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img29-1-6.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>Connect to Azure AD<\/strong> page, authenticate by using the credentials of the <strong>syncadmin<\/strong> user account you created in the previous exercise and click <strong>Next<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img30-7-1024x576.png\" alt=\"\" class=\"wp-image-2127\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img30-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img30-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img30-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img30-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On the <strong>Connect your directories<\/strong> page, click the <strong>Add Directory<\/strong> button to the right of the <strong>adatum.com<\/strong> forest entry.<\/p>\n\n\n\n<ol class=\"wp-block-list\" type=\"1\"><li>In the <strong>AD forest account<\/strong> window, ensure that the option to <strong>Create new AD account<\/strong> is selected, specify the following credentials, and click <strong>OK<\/strong>:<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><td><strong>Setting<\/strong><\/td><td><strong>Value<\/strong><\/td><\/tr><\/thead><tbody><tr><td>User Name<\/td><td><strong>ADATUM\\Student<\/strong><\/td><\/tr><tr><td>Password<\/td><td><strong>Pa55w.rd1234<\/strong><\/td><\/tr><tr><td>&nbsp;<\/td><td><strong>&nbsp;<\/strong><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img32-7-1024x576.png\" alt=\"\" class=\"wp-image-2128\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img32-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img32-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img32-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img32-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Back on the <strong>Connect your directories<\/strong> page, ensure that the <strong>adatum.com<\/strong> entry appears as a configured directory and click <strong>Next<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img33-7-1024x576.png\" alt=\"\" class=\"wp-image-2129\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img33-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img33-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img33-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img33-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>Azure AD sign-in configuration<\/strong> page, note the warning stating <strong>Users will not be able to sign-in to Azure AD with on-premises credentials if the UPN suffix does not match a verified domain name<\/strong>, enable the checkbox <strong>Continue without matching all UPN suffixes to verified domain<\/strong>, and click <strong>Next<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: As explained earlier, this is expected, since you could not verify the custom Azure AD DNS domain <strong>adatum.com<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img34-7-1024x576.png\" alt=\"\" class=\"wp-image-2130\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img34-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img34-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img34-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img34-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>On the <strong>Domain and OU filtering<\/strong> page, click the option <strong>Sync selected domains and OUs<\/strong>, clear all checkboxes, click only the checkbox next to the <strong>ToSync<\/strong> OU, and click <strong>Next<\/strong>.<\/li><li>On the <strong>Uniquely identifying your users<\/strong> page, accept the default settings, and click <strong>Next<\/strong>.<\/li><li>On the <strong>Filter users and devices<\/strong> page, accept the default settings, and click <strong>Next<\/strong>.<\/li><li>On the <strong>Optional features<\/strong> page, accept the default settings, and click <strong>Next<\/strong>.<\/li><li>On the <strong>Ready to configure<\/strong> page, ensure that the <strong>Start the synchronization process when configuration completes<\/strong> checkbox is selected and click <strong>Install<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: Installation should take about 2 minutes.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img35-7-1024x576.png\" alt=\"\" class=\"wp-image-2131\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img35-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img35-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img35-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img35-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click on Next<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img36-7-1024x576.png\" alt=\"\" class=\"wp-image-2132\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img36-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img36-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img36-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img36-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click on Install<\/p>\n\n\n\n<p>Review the information on the <strong>Configuration complete<\/strong> page and click <strong>Exit<\/strong> to close the <strong>Microsoft Azure Active Directory Connect<\/strong> window.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img37-7-1024x576.png\" alt=\"\" class=\"wp-image-2133\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img37-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img37-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img37-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img37-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Task 3: Verify directory synchronization<\/strong><\/p>\n\n\n\n<p>In this task, you will verify that directory synchronization is working.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Within the Remote Desktop session to <strong>adVM<\/strong>, in the Microsoft Edge window displaying the Azure portal, navigate to the <strong>Users &#8211; All users<\/strong> blade of the Adatum Lab Azure AD tenant.<\/li><li>On the <strong>Users | All users<\/strong> blade, note that the list of user objects includes the <strong>aduser1<\/strong> account.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img38-7-1024x576.png\" alt=\"\" class=\"wp-image-2134\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img38-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img38-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img38-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img38-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Select the <strong>aduser1<\/strong> account and, in the <strong>Profile &gt; Identity<\/strong> section, note that the <strong>Source<\/strong> attribute is set to <strong>Windows Server AD<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: You might have to wait a few minutes and select <strong>Refresh<\/strong> for the <strong>aduser1<\/strong> user account to appear.<\/p>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"2\"><li>On the <strong>Users | All users<\/strong> blade, select the <strong>aduser1<\/strong> entry.<\/li><li>On the <strong>aduser1 | Profile<\/strong> blade, in the <strong>Job info<\/strong> section, note that the <strong>Department<\/strong> attribute is not set.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img40-7-1024x576.png\" alt=\"\" class=\"wp-image-2135\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img40-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img40-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img40-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img40-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Within the Remote Desktop session to <strong>adVM<\/strong>, switch to <strong>Active Directory Administrative Center<\/strong>, select the <strong>aduser1<\/strong> entry in the list of objects in the <strong>ToSync<\/strong> OU, and, in the <strong>Tasks<\/strong> pane, in the <strong>ToSync<\/strong> section, select <strong>Properties<\/strong>.<\/li><li>In the <strong>aduser1<\/strong> window, in the <strong>Organization<\/strong> section, in the <strong>Department<\/strong> text box, type <strong>Sales<\/strong>, and select <strong>OK<\/strong>.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img41-7-1024x576.png\" alt=\"\" class=\"wp-image-2136\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img41-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img41-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img41-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img41-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\"><li>Within the Remote Desktop session to <strong>adVM<\/strong>, start <strong>Windows PowerShell<\/strong>.<\/li><li>From the <strong>Administrator: Windows PowerShell<\/strong> console, run the following to start Azure AD Connect delta synchronization:<\/li><\/ul>\n\n\n\n<p>code<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Import-Module -Name 'C:\\Program Files\\Microsoft Azure AD Sync\\Bin\\ADSync\\ADSync.psd1'<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>Start-ADSyncSyncCycle -PolicyType Delta<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img42-7-1024x576.png\" alt=\"\" class=\"wp-image-2137\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img42-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img42-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img42-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img42-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ul class=\"wp-block-list\" type=\"1\" start=\"9\"><li>Switch to the Microsoft Edge window displaying the <strong>aduser1 | Profile<\/strong> blade, refresh the page and note that the <strong>Department<\/strong> property is set to <strong>Sales<\/strong>.<\/li><\/ul>\n\n\n\n<p><strong>Note<\/strong>: You might need to wait for another minute and refresh the page again if the <strong>Department<\/strong> attribute remains not set.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-style-default\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img43-7-1024x576.png\" alt=\"\" class=\"wp-image-2138\" srcset=\"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img43-7-1024x576.png 1024w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img43-7-300x169.png 300w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img43-7-768x432.png 768w, https:\/\/exceedthecloud.com\/wp-content\/uploads\/2022\/02\/img43-7.png 1366w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>Result<\/strong>: After you completed this exercise, you have prepared AD DS for directory synchronization, installed Azure AD Connect, and verified directory synchronization.<\/p>\n\n\n\n<p><mark class=\"kt-highlight\"><strong>Reminder<\/strong>: Don\u2019t forget to delete or shutdown all unused Azure resources after your labs for cost saving<\/mark><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Azure Active Directory (Azure AD) Connect (formerly known as the Directory Synchronization tool, Directory Sync tool, or the DirSync.exe tool) is an application that you install on a domain-joined server to synchronize your on-premises Active Directory Domain Services (AD DS) &hellip; <a href=\"https:\/\/exceedthecloud.com\/?p=271\">Continued<\/a><\/p>\n","protected":false},"author":1,"featured_media":888,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"kt_blocks_editor_width":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[23,21,4],"tags":[87,90,72,85,89,86,33,88,53,84,35],"class_list":["post-271","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hybrid","category-migration","category-practical-labs-series","tag-active-directory","tag-arm","tag-azure-active-directory","tag-azure-ad-connect","tag-cloud-shell","tag-directory","tag-dns","tag-domain-controller","tag-git","tag-synchronization","tag-virtual-machines"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/exceedthecloud.com\/wp-content\/uploads\/2021\/10\/istockphoto-485946989-170667a.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/posts\/271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=271"}],"version-history":[{"count":3,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/posts\/271\/revisions"}],"predecessor-version":[{"id":2343,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/posts\/271\/revisions\/2343"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=\/wp\/v2\/media\/888"}],"wp:attachment":[{"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=271"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=271"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/exceedthecloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}