O365 Hybrid setup for multiple domain hosted under a single tenancy

[password1234]

Hi allQuick question wonder if you can help

Just taken on IT support for 3 new Primary Schools, the entire school is federated however each school has its own server and own domain for now

 

The previous provider registered a single 365 account for all schools so in this 365 tenancy we have

school1.comschool2.comschool3.comAt the moment each schools has their own server and own domain and everything hosted on Prem

We are planning to move all 3 schools to an Hybrid Setup, with Active Directory hosted on the school and it linking back to 365 (Sharepoint Onedrive etc)

The Plan is for now that each school will have their own server and own domain contoller and each server will have the AdSync tool installed on the server connecting back to 365

Can anyone see any issues with this different domain controllers connecting back to a tenancy which hosts multiple domains? or does each school need to have its own seperate tenancy

 

We were thinking of merging all schools into a single domain but due to internet speeds and a host of other things for now we are going to carry on keeping it seperate

[Steve21]

AD Connect wouldn’t work

AD Cloud Sync will

 

So just be careful which version you install

 

Steve

[chaplic]

Single tenant, Single Azure AD Connect, Multiple ADs is fine.

[psydii]

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

 

It is unlikely that a single instance of Azure AD Connect is viable given that they are essentially three separate orgs (i.e. not just separate forests but physically and logically disconnected forests).

 

 

However.... "Azure AD Connect cloud sync is a new offering hybrid identity.... ...It provides the following benefits:

 

Support for synchronizing to an Azure AD tenant from a multi-forest disconnected Active Directory forest environment: The common scenarios include merger & acquisition (where the acquired company's AD forests are isolated from the parent company's AD forests), and companies that have historically had multiple AD forests."

 

https://learn.microsoft.com/en-us/azure/active-directory/cloud-sync/what-is-cloud-sync

Edited March 7, 2023 by psydii