https://github.com/21bshwjt/azadconnect_catch

Azure AD Connect
https://github.com/21bshwjt/azadconnect_catch

Last synced: 1 day ago
JSON representation

Azure AD Connect

• Host: GitHub
• URL: https://github.com/21bshwjt/azadconnect_catch
• Owner: 21bshwjt
• Created: 2021-07-11T15:45:24.000Z (over 3 years ago)
• Default Branch: master
• Last Pushed: 2023-12-01T14:44:19.000Z (about 1 year ago)
• Last Synced: 2024-11-10T17:08:06.544Z (about 2 months ago)
• Language: PowerShell
• Homepage:
• Size: 6.3 MB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Azure AD Connect - Catches

- Azure AD Connect is a Microsoft tool designed to synchronize on-premises Active Directory (AD) identities with Azure Active Directory (Azure AD). This synchronization enables a single identity to be used for accessing both on-premises and cloud-based resources, providing a more seamless and integrated experience for users.

- **Given some catches on Azure AD connect those will be useful during troubleshooting & Sync issue**.

### Active Mode vs. Stagging Mode

- Active Mode (Default) - Import, Export & Synchronization.

- Stagging Mode - Import & Synchronization.

#### Why do we need Stagging mode

- High availability.

- Test and deploy new configuration changes.

- Introduce a new server and decommission the old.

#### Microsoft Entra Connect: Staging server and disaster recovery

- [Microsoft Entra Connect: Staging server and disaster recovery](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-staging-server)

### Source Anchor/mS-DS-ConsistencyGuid

- '**mS-DS-ConsistencyGuid**' AD attribute is synced with Azure AD user's '**ImmutableId**'.

- Traslate_ImmutableId.ps1 [Source](https://blog.jumlin.com/2018/09/powershell-script-convert-immutableid/)

- [Deepdive](https://www.youtube.com/watch?v=e9f0VXNqCuY)

####

```powershell

# Get ImmutableId

# Install-Module MSOnline -Force -Verbose 

$Msolcred = Get-credential

Connect-MsolService -Credential $Msolcred

Get-MsolUser -UserPrincipalName [email protected] | Select ImmutableId

# Get mS-DS-ConsistencyGuid

Get-ADUser bbiswas-a -pr * | Select mS-DS-ConsistencyGuid

```