You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/scoped-synchronization.md
+9-6Lines changed: 9 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -36,7 +36,7 @@ You use the Azure portal or PowerShell to configure the scoped synchronization s
36
36
37
37
| Action |||
38
38
|--|--|--|
39
-
| Create an Azure AD DS managed domain and configure scoped synchronization |[Azure portal](#create-a-managed-domain-and-enable-scoped-synchronization-using-the-azure-portal)|[PowerShell](#create-a-managed-domain-and-enable-scoped-synchronization-using-powershell)|
39
+
| Create an Azure AD DS managed domain and configure scoped synchronization |[Azure portal](#enable-scoped-synchronization-using-the-azure-portal)|[PowerShell](#enable-scoped-synchronization-using-powershell)|
@@ -47,7 +47,7 @@ You use the Azure portal or PowerShell to configure the scoped synchronization s
47
47
> * Objects that are no longer required in the Azure AD DS managed domain are deleted. New objects are created in the managed domain.
48
48
> * Resynchronization may take a long time to complete. The synchronization time depends on the number of objects such as users, groups, and group memberships in the Azure AD DS managed domain and Azure AD directory. For large directories with many hundreds of thousands of objects, resynchronization may take a few days.
49
49
50
-
## Create a managed domain and enable scoped synchronization using the Azure portal
50
+
## Enable scoped synchronization using the Azure portal
51
51
52
52
1. Follow the [tutorial to create and configure an Azure AD DS instance](tutorial-create-instance.md). Complete all prerequisites and deployment steps other than for synchronization scope.
53
53
1. Choose **Scoped** at the synchronization step, then select the Azure AD groups to synchronize to the Azure AD DS instance.
@@ -82,7 +82,7 @@ To disable group-based scoped synchronization for an Azure AD DS managed domain,
82
82
83
83
Changing the scope of synchronization causes the Azure AD DS managed domain to resynchronize all data. Objects that are no longer required in the Azure AD DS managed domain are deleted, and resynchronization may take a long time to complete.
84
84
85
-
## PowerShell script to configure groups for scoped synchronization
85
+
## PowerShell script for scoped synchronization
86
86
87
87
To configure scoped synchronization using PowerShell, first save the following script to a file named `Select-GroupsToSync.ps1`. This script configures Azure AD DS to synchronize selected groups from Azure AD. All user accounts that are part of the specified groups are synchronized to the Azure AD DS managed domain.
## Create a managed domain and enable scoped synchronization using PowerShell
168
+
## Enable scoped synchronization using PowerShell
169
169
170
170
Use PowerShell to complete this set of steps. Refer to the instructions to [enable Azure Active Directory Domain Services using PowerShell](powershell-create-instance.md). A couple of steps in this article are modified slightly to configure scoped synchronization.
171
171
@@ -177,7 +177,7 @@ Use PowerShell to complete this set of steps. Refer to the instructions to [enab
177
177
178
178
1. Determine the groups and users they contain that you want to synchronize from Azure AD. Make a list of the display names of the groups to synchronize to Azure AD DS.
179
179
180
-
1. Run the [script from the previous section](scoped-synchronization.md#powershell-script-to-select-groups-for-scoped-synchronization) and use the *-groupsToAdd* parameter to pass the list of groups to synchronize.
180
+
1. Run the [script from the previous section](#powershell-script-for-scoped-synchronization) and use the *-groupsToAdd* parameter to pass the list of groups to synchronize.
181
181
182
182
> [!WARNING]
183
183
> You must include the *AAD DC Administrators* group in the list of groups for scoped synchronization. If you don't include this group, the Azure AD DS managed domain is unusable.
@@ -215,7 +215,7 @@ When the Azure portal shows that the Azure AD DS managed domain has finished pro
215
215
216
216
## Modify scoped synchronization using Powershell
217
217
218
-
To modify the list of groups whose users should be synchronized to the Azure AD DS managed domain, re-run the [PowerShell script](scoped-synchronization.md#powershell-script-to-select-groups-for-scoped-synchronization) and specify the new list of groups. In the following example, the groups to synchronize no longer includes *GroupName2*, and now includes *GroupName3*.
218
+
To modify the list of groups whose users should be synchronized to the Azure AD DS managed domain, re-run the [PowerShell script](#powershell-script-for-scoped-synchronization) and specify the new list of groups. In the following example, the groups to synchronize no longer includes *GroupName2*, and now includes *GroupName3*.
219
219
220
220
> [!WARNING]
221
221
> You must include the *AAD DC Administrators* group in the list of groups for scoped synchronization. If you don't include this group, the Azure AD DS managed domain is unusable.
@@ -246,3 +246,6 @@ Changing the scope of synchronization causes the Azure AD DS managed domain to r
246
246
## Next steps
247
247
248
248
To learn more about the synchronization process, see [Understand synchronization in Azure AD Domain Services](synchronization.md).
0 commit comments