Just installed an on-premises AD forest to join with our Azure AD. I setup AD connect for synchronization. I want to sync down the accounts from Azure AD into my new on-premises AD forest (which is brand new and empty). I only see instructions for pushing on-premises account up, but nothing about pulling them down. Any ideas what I'm missing?

  • Someone can correct me, but Azure AD was one-way only last time I checked. As for like password it only send the hash, not the full info up, it was why it's was one way only. – yagmoth555 May 26 '16 at 17:31
  • you drank the cool aide, now you have to pony up $$$$ – Sum1sAdmin May 26 '16 at 19:07
  • 1
    @yagmoth555 You can sync passwords both directions, so you can reset the PW using Azure AD and then sync back down to on prem, that works already, but not full account sync, – Sam Cogan May 28 '16 at 23:45

you didn't miss anything, Azure AD Connect only syncs user accounts from your on premises AD to your Azure AD. https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/


  • There was a preview feature available for a while that did go the other way but it was withdrawn. I suspect it will be back at some point. – Sam Cogan May 26 '16 at 19:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.