Office 365 & Azure AD Connect

[Chuckster]

I’ve finally got around to installing and configuring Azure AD Connect, and I can see from my test OU that my users are being synced successfully to O365.

 

A bit of my school’s network background:

• The FQDN is schoolname.internal
  
• Our domain is schoolname.county.sch.uk
  
• I’ve created a UPN suffix in Active Directory Domains & Trust to match the external domain name
  
• Prior to installing Azure, user accounts are created as [first initial][surname], eg. Joe Bloggs is jbloggs, in AD
  
• Again, prior to Azure, in O365, user accounts are created as [firstname].[surname]@schoolname.county.sch.uk, e.g. [email protected]
  

 

With Azure enabled, I can see accounts being created as:

• [email protected] (picking up the UPN suffix I created)
  

 

However, I need the account in AD to marry up with already existing accounts in O365, so how do I achieve this?

[Katy]

When we did it, we had to set the UPN to the same as the email we wanted (so the "Pre-Win2000 Logon Name" would be SCHOOLNAME\JBloggs, and the "User Logon Name" [email protected]). This way they can also log onto Windows using their "email address" (actually UPN which happens to be the same).

[sted]

when you install ad connect you can iirc tell it what field to take a the username field. If your ad usernames are fbloggs and his email is fred.bloggs you would need to tell it to sync from the email address field in ad (after filling that in correctly)

[stevec_]

AD connect uses the UPN from active directory (User logon name + UPN Suffix). As long as this field matches the already created O365 accounts they will be associated with the correct account.

 

[mavhc]

And spaces are converted to something else. You can use Bulk AD Users to set things en mass

[Chuckster]

when you install ad connect you can iirc tell it what field to take a the username field. If your ad usernames are fbloggs and his email is fred.bloggs you would need to tell it to sync from the email address field in ad (after filling that in correctly)

@sted, I've done this but it's still not playing ball. What ever accounts that exist in AD are being created as new in O365 despite there already being existing accounts.

 

 

Guys, any new accounts created from today onwards work fine. Is there a guide or instructions I could follow that enable me to match accounts in AD to O365?

[mavhc]

Think you just change the post 2000 user logon name to match the existing account and it works

[Chuckster]

In the AD properties of a user account I have changed the UPN suffix to match the school's domain name.

 

I am still unable to match AD accounts to O365 accounts.

 

There isn't anything glaringly obvious in the Azure AD Connect that I've missed out.

[mavhc]

And you've changed the part before the @ to match the existing email/account address?

[abaxter2]

By the sound of things it looks like AAD Connect is still pulling the first part of the username: You mentioned the following: "Prior to installing Azure, user accounts are created as [first initial][surname], eg. Joe Bloggs is jbloggs, in AD" So AAD connect will use jbloggs as the username, what will not match your Office 365 accounts as you mentioned the following: "prior to Azure, in O365, user accounts are created as [firstname].[surname]@schoolname.county.sch.uk"

 

You could try changing the AAD connect to use a "Alternate ID" : https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#azure-ad-sign-in-configuration

 

Or could look at changing the SMTP address: https://www.codetwo.com/admins-blog/how-to-merge-an-office-365-account-with-an-on-premises-ad-account-after-hybrid-configuration/ (Please do not use the SMTP route on accounts that already in Offfice 365 - do a test first with a test account - just incase it goes wrong)

[chaplic]

What do you mean by 'already existing accounts in office 365' ? Accounts you have created directly in o365 before setting up Azure AD sync?

 

Whats your imutableID in azure AD sync?

Also, just as a check, look at sync errors in Azure AD Connect Health