Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just set up a new Windows Server 2012 domain controller and remembered I should install sha1hexfltr to allow my passwords to be uploaded to Google Apps via Google Apps Directory Sync. However, when I went to I get a page not found message. Does anyone know what happend to this project? Is this no longer needed with the latest versions of GADS?

share|improve this question

Try looking this ( It seems that the repository was cloned to another location.

For further information you can look current GADS documentation (

share|improve this answer

There is a newer filter DLL available here:

Full installation details here:

This will do the same job that sha1hexfltr did, catching password change events to create hashes that are compatible with Google Apps.

share|improve this answer
up vote 0 down vote accepted

I just found that Google has written their own solution Google Apps Password Sync. It automatically sends passwords to Google as they change, instead of storing them in Active Directory for GADS to upload later. The configuration instructions are available here. You will need to install and configure this app on each writable domain controller

For those of you migrating from sha1hexfltr, here are the steps to remove it.

  1. Remove C:\windows\System32\sha1hexfltr.dll
  2. Open regedit and remove the "sha1hexfltr" line from HKLM\System\CurrentControlSet\Control\LSA\Notification Packages
  3. Reboot your server
  4. Don't forget to update your GADS configuration so it doesn't sync user passwords with the division attribute anymore.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.