Password Sync - P1 licences needed?

[e-class]

Hey all,

 

So I'm just about to start working on moving data to the cloud i.e. move user home drives to OneDrive and shared folders to SharePoint.

 

For this I think we'll need to sync the on prem AD passwords with their M365 accounts, which we can do using the AD connect tool.

 

My question is, will we need to purchase the P1 licences so that if users change their password in the cloud it will 'sync back' to our on prem AD? Otherwise, they'll be out of sync?

 

I assume if they change their passwords on prem it will sync back to the cloud.

 

Thanks

[robyholmes]

You need P1 for self password reset yes. You can also use it for easier MFA roll out for staff by whitelisting the school external IP.

[e-class]

Thanks for that.

 

Sorry might not be making myself clear, apologies.

So if I implement AD Connect, and a user changes their password locally on-prem from their workstation, it will change in our on-prem AD. That will then sync up to M365.

So that's fine.

 

In the scenario, where they change their M365 password in the cloud, will that sync back to on-prem AD or not? I think that's my question i.e. will a password change on either on-prem or AD work fine without having to purchase P1 licences.

 

I'm not looking to implement self-service password reset straight away at the moment.

 

Thanks again.

[3s-gtech]

Thanks for that.

 

Sorry might not be making myself clear, apologies.

So if I implement AD Connect, and a user changes their password locally on-prem from their workstation, it will change in our on-prem AD. That will then sync up to M365.

So that's fine.

 

In the scenario, where they change their M365 password in the cloud, will that sync back to on-prem AD or not? I think that's my question i.e. will a password change on either on-prem or AD work fine without having to purchase P1 licences.

 

I'm not looking to implement self-service password reset straight away at the moment.

 

Thanks again.

 

Without it being licensed and set up, users simply can’t change their passwords in M365 - they’ll get a message and you may get a notification as admin.

[box_l]

Yes, you will need an P1 or an agreement that includes password writeback.

[e-class]

Without it being licensed and set up, users simply can’t change their passwords in M365 - they’ll get a message and you may get a notification as admin.

 

Ah ok, that makes sense.

So the option after logging in and then going to settings, password, to change their password in M365 will no longer work.

 

Thanks

[KK20]

we dont pay for any premium. This is what happens:

 

onprem PW change is synced to o365 cloud

no ability for off premises writeback, you basically get an email from the user asking to change their password. which I ignore.

[e-class]

One other question, the users that we don't sync i.e. that don't have on-prem accounts, they'll still be able to change their M365 passwords in the cloud still?

[robyholmes]

One other question, the users that we don't sync i.e. that don't have on-prem accounts, they'll still be able to change their M365 passwords in the cloud still?

 

Yes they can.