Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We use Google Apps for our systems and have an Active Directory in place as well. The AD is not being used as of now but we really want to get started with using it.

A few questions re. using Google Apps Directory Sync in this scenario

The document says all my info from the AD will stay the same but the one in Google Apps will change to match it.

  1. I have some users defined in Google Apps but not in the AD. Is there any way I can preserve those during the sync? Or do I absolutely have to create them on AD first?

  2. I understand I'll have to use the user provisioning API to ensure 2-way sync. Is there an easier option to this?


For 1 I did find exclusion rules but the example provided in the doc is for just a single user in Google Apps and missing from LDAP. There is no rule for multiple users?

share|improve this question

Is it just a one time sync or are you planning to run Google Apps Directory Sync regularly?

I didn't understand what you meant in second bullet. By 2-way sync, do you mean you want to sync from Google Apps to AD?

share|improve this answer
The sync will run regularly. By 2-way sync I mean if I create a user in Google Apps, it should be added to the AD as well. I know I can have a web interface which creates users in both (using Provisioning API). But wanted to know if there is a program which does this already. – lostInTransit Aug 8 '11 at 5:12
Google Apps Directory Sync does not provide 2-Way sync, probably you can check on appropriate Google Help forum on this. For excluding your users, probably you can check if there is any pattern on all of those users (or you can add some unique prefix/suffix yourself manually if its not a huge manual task) and use Regex based user exclusion in the user exclusion page. – Ashwin Aug 23 '11 at 15:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.