Azure AD Sync - Passwords

[dblight]

Finally got around to setting up Azure AD Sync with Office365 from local AD.

 

Does anyone have a definitive answer on how long it takes to sync a password change? I.E when a user changes their AD password locally the time it takes for office365 to update with new password?

 

I cannot seem to find an answer. I know with DIRSYNC there was a separate password sync script but not with Azure AD Sync

[synaesthesia]

It syncs with everything else, depending on how you set it up. Ours syncs every 30 minutes.

[FN-GM]

Passwords go through a different sync, usually every 3 minutes.

[Marshall_IT]

Passwords go through a different sync, usually every 3 minutes.

 

This is amazing! I've been laboring under the misconception that it still only syncs every 3 hours!

[MrFrostmaul]

By default the main sync (such as for AD account changes and attributes) is 3 hours by default, but you can change to what you want on a config file. The password sync happens every three minutes, but have found out on some occasions it's almost instant.

[dblight]

Brilliant, thanks all. I have told the powers at be it should be within 15 minutes as that has what I've noticed.

[ellsandell]

I think the older DirSync client it used to default on 3 hours. Not set up a sync using the newer tool so unsure, either way you can customize it. (In DirSync the amount of time between synchronizations was determined by the Microsoft.Online.DirSync.Scheduler.exe.config file.

 

Change Default Sync time of Azure AD Sync

Edited October 8, 2015 by ellsandell

[synaesthesia]

Ah, forgot it had changed. Had to edit a file to change the schedule from the default 3 hours in Dirsync, and now it's rather easier in Azure

[snagrat]

Passwords go through a different sync, usually every 3 minutes.

 

I thought it was 15seconds!

[EduTech]

Hi,

 

Let me give you the facts,

 

Object synchronization and password synchronization are two completely separate components with-in the software. By default your

 

Object Synchronization will run every 3 Hours and this will synchronize object attribute changes, provision new objects, delete objects etc. (Users, Groups, Contacts etc.). If you need to make changes faster than 3 hours it is recommended that you run a manual sync using PowerShell or by running the Scheduled Task manually it is actually not recommended to change it from 3 hours, although everyone seems to do it.

 

Password Synchronization runs every 2 min's.

 

To answer your question, password changes will happen with-in 2 minutes providing you have no replication issues etc. with-In stipulated because of course you don't know when the last sync run so if you change a password 15 seconds before the next sync then that password will be synchronized in 15 seconds in terms of setting expectations to end users it is your choice weather you give them the facts, or give your-self some flexibility just in case there is a server issue etc.

 

I hope that helps,

James.

[synaesthesia]

Damn useful, cheers @EduTech

[dblight]

Fantastic, Thanks @EduTech

[jonspurs]

When using Azure AD Sync for synching passwords, can you specify OUs of users? Eg, just sync passwords of users under "Students"? Or is every password in your AD synched up?

Thanks.

[Marshall_IT]

You can buy you need to go into the settings of the sync Manager after you've set it up so make sure not to set it to sync straight after install. Unless they've changed it on the setup.