Azure AD Connect force sync

[jmak]

Is it possible?

 

I have changed a password on the DC which synchronises correctly, however it seems that you have to wait an unknown amount of time before it syncs to Azure AD. I can view the status, but can't find an option to force it.

 

TIA

[HPlum78]

Start-adsynccycle -policytype delta

 

Oh and its not random

 

Get-adsyncscheduler will give you the timing

 

It's 30 mins default I think...

Edited March 12, 2019 by HPlum78

[jmak]

Do I run the command on the DC or in Azure AD admin?

[HPlum78]

You would need to run it from the server where aad connect is installed

[NetworkNinja]

To force AD Sync you will need to run powershell and run the following commends.

 

Start-ADSyncSyncCycle -Policytype Initial

 

Start-ADSyncSyncCycle -Policytype Delta

 

This worked for me anyway.

[HPlum78]

A full sync (or initial) is not required if you are already syncing (in the most part) if the schema changes or you add/ remove attributes then you do an initial sync. In a round about sort of way, full syncs don't need to be run and should be thought about as while the full sync happens you will stop the provisoing of new objects.

 

(if i do a full sync then thats a four day process and that's on a very well connected link!)

Edited March 12, 2019 by HPlum78

[pete]

Password sync should be every 2 minutes (using Azure AD Connect).

 

Syncing a new user (for example) is every 30 minutes.

[free780]

# Sync user to AzureAD using ADConnect

Invoke-Command -ComputerName -ScriptBlock {Start-ADSyncSyncCycle-PolicyType delta} -Verbose

 

I use this but I try to not do it get people used to the cloud and that processes will take longer.

Edited March 12, 2019 by free780