You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-domain-services/template-create-instance.md
+9-12Lines changed: 9 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ ms.service: active-directory
9
9
ms.subservice: domain-services
10
10
ms.workload: identity
11
11
ms.topic: conceptual
12
-
ms.date: 12/02/2019
12
+
ms.date: 01/14/2020
13
13
ms.author: iainfou
14
14
15
15
---
@@ -115,23 +115,21 @@ There's nothing for you to configure for Azure AD DS to be distributed across zo
115
115
116
116
## Resource definition for Azure AD DS
117
117
118
+
## Resource definition for Azure AD DS
119
+
118
120
As part of the Resource Manager resource definition, the following configuration parameters are required:
119
121
120
-
***domainName** - The DNS domain name for your managed domain, taking into consideration the previous points on naming prefixes and conflicts.
121
-
***filteredSync** - Azure AD DS lets you synchronize *all* users and groups available in Azure AD, or a *scoped* synchronization of only specific groups. If you choose to synchronize all users and groups, you can't later choose to only perform a scoped synchronization. For more information about scoped synchronization, see [Azure AD Domain Services scoped synchronization][scoped-sync].
122
-
* When **filteredSync** is *Disabled*, all users are synchronized. When *Enabled*, only the specified groups are synchronized
123
-
***domainConfigurationType** - A *forest* is a logical construct used by Active Directory Domain Services to group one or more domains. By default, an Azure AD DS managed domain is created as a *User* forest. This type of forest synchronizes all objects from Azure AD, including any user accounts created in an on-premises AD DS environment. A *Resource* forest only synchronizes users and groups created directly in Azure AD. Resource forests are currently in preview. For more information on *Resource* forests, including why you may use one and how to create forest trusts with on-premises AD DS domains, see [Azure AD DS resource forests overview][resource-forests].
124
-
* When **domainConfiguration** type is *FullySynced*, a user forest is created. When *ResourceTrusting*, a resource forest is created.
125
-
***notificationSettings** - If there are any alerts generated in the Azure AD DS managed domain, email notifications can be sent out. *Global administrators* of the Azure tenant and members of the *AAD DC Administrators* group can be *Enabled* for these notifications.
126
-
* If desired, you can add additional recipients for notifications when there are alerts that require attention.
122
+
| Parameter | Value |
123
+
|-------------------------|---------|
124
+
| domainName | The DNS domain name for your managed domain, taking into consideration the previous points on naming prefixes and conflicts. |
125
+
| filteredSync | Azure AD DS lets you synchronize *all* users and groups available in Azure AD, or a *scoped* synchronization of only specific groups. If you choose to synchronize all users and groups, you can't later choose to only perform a scoped synchronization.<br /> For more information about scoped synchronization, see [Azure AD Domain Services scoped synchronization][scoped-sync].|
126
+
| notificationSettings | If there are any alerts generated in the Azure AD DS managed domain, email notifications can be sent out. <br />*Global administrators* of the Azure tenant and members of the *AAD DC Administrators* group can be *Enabled* for these notifications.<br /> If desired, you can add additional recipients for notifications when there are alerts that require attention.|
127
+
| domainConfigurationType | By default, an Azure AD DS managed domain is created as a *User* forest. This type of forest synchronizes all objects from Azure AD, including any user accounts created in an on-premises AD DS environment. You don't need to specify a *domainConfiguration* value to create a user forest.<br /> A *Resource* forest only synchronizes users and groups created directly in Azure AD. Resource forests are currently in preview. Set the value to *ResourceTrusting* to create a resource forest.<br />For more information on *Resource* forests, including why you may use one and how to create forest trusts with on-premises AD DS domains, see [Azure AD DS resource forests overview][resource-forests].|
127
128
128
129
The following condensed parameters definition shows how these values are declared. A user forest named *aadds.contoso.com* is created with all users from Azure AD synchronized to the Azure AD DS managed domain:
129
130
130
131
```json
131
132
"parameters": {
132
-
"domainConfigurationType": {
133
-
"value": "FullySynced"
134
-
},
135
133
"domainName": {
136
134
"value": "aadds.contoso.com"
137
135
},
@@ -165,7 +163,6 @@ The following condensed Resource Manager template resource type is then used to
0 commit comments