Azure AD Connect - DC or MS?

[Mr_Jiminy]

Based on the amount of problematic issues being experienced with Azure AD Connect of late, I'm not overly keen to install this on a spare DC.

 

The MS prerequisites stipulate either a DC or MS, however I just wondered if anyone had installed on a member server?

[FragglePete]

Based on the amount of problematic issues being experienced with Azure AD Connect of late, I'm not overly keen to install this on a spare DC.

 

The MS prerequisites stipulate either a DC or MS, however I just wondered if anyone had installed on a member server?

 

I have it running on a dedicated VM which is a member server. Migrated from DirSync to Azure AD Connect a few months back; had a few issues during the migration but got it sorted eventually and has been rock solid ever since.

 

Pete

[FN-GM]

We have it installed on a member server. No issues at all.

[Reverend_Dan]

Dedicated VM member server here, no issues other than when the password needs changing

[sister_annex]

We have it installed alongside a few other services on a Virtual Member server... been solid as since the upgrade from DirSync

[Mr_Jiminy]

Ta all, read a few threads on here which suggested users had installed on a DC, which I haste I'm not keen to do.

 

@Reverend_Dan What password problems have you experienced?

[mikkydoos]

Its more solid than DirSync and more configurable. I have it on a VM 2012 R2 DC. Completely solid

[pete]

Same - dedicated member server as a VM.

 

Dedicated VM member server here, no issues other than when the password needs changing

 

You can set that to a complex password that doesn't expire, should you wish to:

 

set-msoluser -userprincipalname [email protected] -PasswordNeverExpires $true

 

More info: https://blogs.technet.microsoft.com/neiljohn/2011/09/05/office-365-service-accountshow-do-i-stop-dirsync-from-breaking-every-90-days/

[EduTech]

If you use Azure AD Connect we create a Dedicated Sync Account so that you don't have to worry about the password expiration issues.

 

James.

[LemonEntry]

If you use Azure AD Connect we create a Dedicated Sync Account so that you don't have to worry about the password expiration issues.

 

James.

Is the right answer. Ours runs on a DC with a dedicated account. The only issue I have is that it was far too painless to migrate from DirSync. I'm just waiting for the entire thing to come crashing down, somehow.

[dapaulio]

I had issues doing a direct upgrade on my physical 2008 r2 dc to ad connect.

Ended up having to fresh install on my other 2012 r2 virtual dc

 

Touch wood from day 1 it has been solid

 

Edit: a dedicated ad service account should be standard.

Edited July 5, 2016 by dapaulio

[jezi55]

We have it installed on a member server again we upgraded from dirsync and had no issues at all.

[EduTech]

Is the right answer. Ours runs on a DC with a dedicated account. The only issue I have is that it was far too painless to migrate from DirSync. I'm just waiting for the entire thing to come crashing down, somehow.

 

We spent a lot of time ensuring that DirSync upgrades went as smooth as possible; we had a few hiccups at the start but at the moment we primarily see issues when people went and changed the DirSync Configuation to which most of the time was an unsupported change and so we struggle to know about all the things that people poked around with :-)

 

The same goes for Auto Upgrade that is available that is something that we have such a high bar for because we ofcourse need to ensure that goes smooth.

 

One of the biggest issues at the moment we see people running in to is Proxy/Network related issues which is something we are looking to see how we can further help in those scenarios so that such problems are not encountered.

 

Feedback is always appreciated; so feel free to drop a PM my way if you have anything you want to discuss we do review and discuss customer feedback that is provided.

 

James.

Edited July 10, 2016 by EduTech