I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ends automatically. The catch is that the AD on the exchange server end (off-site) has some other OUs that I do not want to sync.

Is it possible to set up a trust between OUs so that only changes/additions made inside the selected OU is synced, rather than syncing the whole of AD?

Would this require a site-to-site VPN connection?


  • What are you trying to do and why? Also, what have you read and what have you tried? – BlueCompute Mar 17 '16 at 17:51
  • Thanks for your response. I am trying to synchronise passwords so that if a user changes their password in OWA, it also changes their in-house file server AD account's password. Is there a better way to do this? – slehmann36 Mar 18 '16 at 7:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.