ENow Exchange & Office 365 Solutions Engine Blog (ESE)

Understanding Auto-Upgrade Options in Azure AD Connect

Posted by Jeff Guillet MVP, MCSM on Jul 25, 2017 6:00:00 AM

For hybrid customers, Azure Active Directory Connect is one of the most important tools you need to keep Azure AD up-to-date. Besides directory synchronization, it provides means for authentication to Office 365 resources using password hash sync, pass-through authentication, or AD FS.

Read More

Topics: Azure AD Connect

Building Simple Azure Resource Manager Templates – Part 1

Posted by Nathan O'Bryan MVP, MCSM on Jul 6, 2017 5:30:00 AM

In my last blog post here, I wrote an introduction to Azure Resource Manager (ARM). ARM is the toolset Microsoft has added to Azure for provisioning and controlling resources in Azure.

Read More

Topics: Azure, Azure AD Connect, Azure AD PowerShell Module, Azure Resource Manager

Getting Started with Azure Resource Manager

Posted by Nathan O'Bryan MVP, MCSM on Jun 28, 2017 6:00:00 AM

Azure Resource Manager (ARM) is Microsoft's platform for deploying and managing resources within Azure. ARM allows you to build resource deployment templates using PowerShell and JSON scripts to build repeatable and consistent deployments in Azure.

Read More

Topics: Azure, Azure AD Connect, Azure AD PowerShell Module, Azure Resource Manager

New and Advanced Features for Azure Active Directory Connect

Posted by Nathan O'Bryan MVP, MCSM on Oct 25, 2016 5:16:32 PM

Identity management is a huge part of any organization's migration into “the cloud.” Sure, you can move your email, your IM and presence, your document libraries, maybe even your voice and video services into Office 365. But unless your organization is very small, identity management will still take place in your own on-premises Active Directory.

Since the introduction of Office 365, and even before that with the ironically named “BPOS,” Microsoft has had several different solutions for cloud identity management. These solutions have ranged from bad to confusing. The solutions that have been easy to use have lacked good functionality, and the solutions with enterprise functionality have been difficult and costly to deploy.

Read More

Topics: Azure, Azure AD Connect

Force Azure AD Connect to connect to specific Domain Controllers only

Posted by Michael Van Horenbeeck MVP, MCSM on Feb 11, 2016 2:30:00 AM

Consider the following scenario: you are about to implement directory synchronization for Office 365. You have multiple Active Directory sites across several, geographically dispersed, locations all over the world. Unsurprisingly, some of these locations have better connectivity than others and you might not want AAD Connect to connect to Domain Controllers in locations with a slow or high latency connection at the risk of slowing down the entire process.

When Azure AD Connect connects to a new forest, it uses DNS to locate domain controllers it needs to connect to. Without additional configuration, it is very difficult to control or know exactly which Domain Controllers AAD Connect will connect to. I believe that within the domain it is installed in, AAD Connect will try and connect to Domain Controllers within the same site first –but I’m still waiting on getting that confirmed. Even if that is true, that would not necessarily be the case for remote forests as there is no way for AAD Connect to know which site in the remote forest is closest.

Once AAD Connect is installed, you will find that it is relatively easy to define a (static) list of Domain Controllers that AAD Connect should connect to.

Read More

Topics: Azure, AADConnect, Azure AD Connect

A Closer Look at Azure AD Connect – Part 5

Posted by Michael Van Horenbeeck MVP, MCSM on Aug 25, 2015 6:42:00 PM

Welcome to the fifth part of this article series about Azure AD Connect. In the previous article, we've taken a look at some of the optional features you can enable for directory synchronization. In this article, we'll cover a few more features -- more specifically the User and Group write-back capabilities.

Before discussing these features, note that they are currently in preview. You can test the features, but should not use them in production unless you have explicit permission by Microsoft.

Now that the disclaimer is out of the way, let's have a look at the User write-back feature.

Read More

Topics: Active Directory, Office 365, Microsoft Exchange, Azure AD Connect, user write-back feature, group write-back feature

A Closer Look at Azure AD Connect – Part 4

Posted by Michael Van Horenbeeck MVP, MCSM on Aug 13, 2015 7:59:00 AM

Welcome to the fourth part of this article series about Azure AD Connect. In the previous article, I discussed permissions for a custom installation, and we dived a little deeper into the upgrade capabilities. Before jumping into the 'advanced' customization options such the filtering abilities, I wanted to take a look at some of the additional (preview) features that Azure AD Connect offers to date.

Read More

Topics: Active Directory, Office 365, Microsoft Exchange, Azure AD Connect

A Closer Look at Azure AD Connect – Part 3

Posted by Michael Van Horenbeeck MVP, MCSM on Aug 5, 2015 2:06:00 PM

Welcome to the third part of this article series about Azure AD Connect. In the previous article, I discussed the various custom installation options and the implications of using a separate SQL database.

Following that article, I received a few interesting questions that warranted some follow-up. More specifically, I had a few people call out that documentation regarding the required permissions for Azure AD Connect is scarce. Although the requirements are documented as depicted in the image below, I agree that there might be some confusion, depending on your deployment configuration.

Read More

Topics: Active Directory, ADFS, DirSync, Azure AD Connect

A Closer Look at Azure AD Connect – Part 2

Posted by Michael Van Horenbeeck MVP, MCSM on Jul 8, 2015 10:06:20 AM

In the previous part of this article series, we've taken a first look at Azure AD Connect and reviewed what a default installation looks like using the express settings. In this part, we'll dive deeper into the advanced options of the installation wizard. The express settings option likely meets the needs for most organizations looking into deploying directory synchronization alone. However, if you are looking at a more complex synchronization scenario, like a multi-forest environment or if you would like to deploy and configure Active Directory Federation Services, the advanced options are what you are looking for! 

Note: The advanced options, especially the ones related to the advanced synchronization scenarios, are very powerful and can create potentially disastrous consequences. Even though we will be discussing the various options throughout the next few articles, do not attempt to make any changes if you are not completely familiar and comfortable with the option and its effects on your deployment and environment!

Read More

Topics: SQL, ADFS, Azure AD Connect, installation wizard

A Closer Look at Azure AD Connect – Part 1

Posted by Michael Van Horenbeeck MVP, MCSM on Jul 1, 2015 2:55:18 PM

As reported earlier, Microsoft released Azure AD Connect to the public on June 24. The long-anticipated tool is the successor to Azure AD Sync and DirSync. But it’s much more than that. 

Although a large part of Azure AD Connect still revolves around directory synchronization, I like to look at it more as a "Cloud Identity Enablement" — a solution rather than just a synchronization component. This is because Azure AD Connect not only allows you to deploy directory synchronization for almost every possible identity scenario you can dream of, but it also enables you to set up and configure identity federation through Active Directory Federation Services from within the same wizard.

Configuring identity federation for your Office 365 tenant consists of three key steps:

Read More

Topics: Azure, AADSync, Azure AD Connect, configuring identity federation

Gain visibility into your Office 365 Deployment

See why monitoring makes sense in a cloudy world.