SmiKar Software

How to sync users from a second domain using AD Connect

Everything is connected

Overview

Do you need to integrate a new company in with your existing employer and therefore in to your already provisioned Azure AD tenant. Or perhaps just need to share your tenancy and office 365 services with more than one company, then you could find yourself in a position where you need to sync users from another domain and have already configured AD Connect, well there is a way to add the second domain to your current Azure tenancy, so you can sync those users from the second domain.

As always there are some limitations so it’s best you review the supported topology when it comes to AD Connect and multiple domains/tenants.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies

Most likely the one that will cause you the most grief, and is probably why you landed here in the first place is that you can only have one AD Connect instance per tenant

Before proceeding, we are assuming you have already configured an AD trust between the 2 domains. If not, you will need to perform this first.

And if you’re not sure how to do that, here is a good guide.

https://www.azure365pro.com/how-to-create-two-way-transitive-trust-windows-server-2008-r2/

OK, now that we have our domain trust established, let’s step into the process.

 

Step by step guide how to synchronise users from a second domain in to Azure Active Directory.

Launch AD Connect and click on Configure

Click on Customize synchronization options and click Next

Enter the credentials to connect to Azure AD and ensure the account is a global administrator.

Enter the name of the second domain and click Add Directory

Enter the details of a user account in the domain that is a member of the enterprise administrators group.

You will now see the second domain added to the configured directories list.

Select whether to sync all the objects in the domain, or to sync only objects in specific OUs.

Select any optional feature you require and click Next

Tick the box if you want to start the synchronisation process once the configuration completes, or you may untick it and place AD Connect into a “disabled” mode (will require PowerShell commands to activate it).

Click Configure when ready to finish the process.

AD Connect will now synchronise objects from both domains into your Azure AD tenant.

You can monitor the process by launching the AD Connect Synchronization Service Manager.

1 thought on “How to sync users from a second domain using AD Connect

Leave a Reply