Today I will be installing AADconnect. With AADconnect you can sync your on-premise Active Directory objects with the ones in Azure Active Directory which is used by your Office 365 online tennant.
You will not be needing this if you have deployed or want to deploy ADFS,
How to install.
Make sure you have all the latest updates on the Windows machine that you want to install AADconnect on. Remember that this machine can be an Active Directory Domain Controller but it does not HAVE to be. You can also use a member server. As long as it is running at least Windows Server 2008 R2 you will be fine.
Prior to installing AADconnect, you have to install Powershell 3.0. To accomplish this, you need to install the Windows Management Framework 4.0 from here. In addition, WMF 4.0 needs Microsoft .NET Framework 4.5. which can be obtained from the Microsoft Download Center.
Finally we need an account in your on-premise Active Directory of which the password never expires and that is a member of Domain Users, Domain Admins and Enterprise Admins. In this blogpost I will use SVC_AADconnect.
Allright so finally we can now install AADconnect. First download the installer from this site.
Copy the installer to the machine you are trying to install AADconnect on and run it (as administrator).
You will be treated with a welcome screen. Make sure you read and agree to the license terms and privacy notice.
I will be using the Express Settings. You should also choose this if you have only one Active Directory forest and don’t want to exclude certain oU’s.
First you need to enter the administrative account of your Office 365 Tennant (a global Administrator) and the password associated with it.
Next the installer needs to know which account you would like to use for connecting to your on-premise Active Directory. In my case this would be the newly created SVC_AADconnect account.
Make sure you are ready to begin synchronizing your on-premise Active Directory with the Azure AD of the Office 365 tennant, because when you leave the ‘Start synchronization process…’ tick on, it wil obviously start syncing immediately. It is also possible to untick it and start the sync process later on manually.
After the install is done, you can start the sync proces by running the appropriate Windows task.
To check if your sync is successful, you could make a shortcut to “C:\Program Files\Microsoft Azure AD Sync\UIShell\miisclient.exe” and run it.
Once it says success, you can check in the Office 365 portal if everything is ok.
I hope that some of you benefited from this post.