Azure AD Connect Settings Note

Additional Notes on Azure Active Directory Connect (Azure AD Connect)
(Only my memo)

AAD - On-prem AD Sync:

• Separate Forests
• Forest with GAL Sync
• Account-Resource Forest

Multi Forest Customize:

• Custom Install Location
• Exist SQL
• Service Account
• Custom Sync Group

Optional Feature
+ Writeback  [Azure AD → On-Prem AD]

• Password
• User
• Group (No SG or DG "distribution groups")

+ Directory Extensions Attribute  [On-Prem AD → Azure AD]

• AD Attributes

Intune:
Enable Device Registration in AAD (MFA)
     "isCompliant"
     ADFS in WS10
     Windows 10 converters sync to devices (and writeback)

ADFD Farm:
Certificate File  (*.pfx) with password.

Staging Mode:
For backup and site testing.

AAD Connect Health:
Checking status of AAD as well as connection status.

- End -