Skip to content

Commit 67aa905

Browse files
authored
Merge pull request #106096 from MarileeTurscak-MSFT/patch-320
Added writeback note
2 parents d65b73c + 2e4920f commit 67aa905

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

articles/active-directory/authentication/tutorial-enable-sspr-writeback.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,10 +80,13 @@ To set up the appropriate permissions for password writeback to occur, complete
8080

8181
When you update permissions, it might take up to an hour or more for these permissions to replicate to all the objects in your directory.
8282

83-
Password policies in the on-premises AD DS environment may prevent password resets from being correctly processed. For password writeback to work correctly, group policy for *Minimum password age* must be set to 0. This setting can be found under **Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies** within `gpedit.msc`.
83+
Password policies in the on-premises AD DS environment may prevent password resets from being correctly processed. For password writeback to work most efficiently, the group policy for *Minimum password age* must be set to 0. This setting can be found under **Computer Configuration > Policies > Windows Settings > Security Settings > Account Policies** within `gpedit.msc`.
8484

8585
If you update the group policy, wait for the updated policy to replicate, or use the `gpupdate /force` command.
8686

87+
> [!Note]
88+
> In order for passwords to be changed immediately, password writeback must be set to 0. However, if users adhere to the on-premises policies, and the *Minimum password age* is set to a value greater than zero, password writeback will still work after the on-premises policies are evaluated.
89+
8790
## Enable password writeback in Azure AD Connect
8891

8992
One of the configuration options in Azure AD Connect is for password writeback. When this option is enabled, password change events cause Azure AD Connect to synchronize the updated credentials back to the on-premises AD DS environment.

0 commit comments

Comments
 (0)