Skip to content

Commit 99e9ae1

Browse files
committed
updating
1 parent 37c49d7 commit 99e9ae1

File tree

1 file changed

+25
-25
lines changed

1 file changed

+25
-25
lines changed

articles/active-directory/hybrid/how-to-connect-sync-endpoint-api-v2.md

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ It is recommended that you follow the [swing migration](https://docs.microsoft.c
3838
### Swing migration for deploying V2 endpoint
3939
The following steps will guide you through deploying the v2 endpoint using the swing method.
4040

41-
1. Deploy the V2 endpoint on the current staging server. This will be known as the **V2 server** in the steps below. The current active server will continue to process the production workload using the V1 endpoint, which will be called the **V1 server** below.
41+
1. Deploy the V2 endpoint on the current staging server. This server will be known as the **V2 server** in the steps below. The current active server will continue to process the production workload using the V1 endpoint, which will be called the **V1 server** below.
4242
1. Validate that the **V2 server** is still processing imports as expected. At this stage, large groups will not be provisioned to Azure AD or on-prem AD, but you will be able to verify that the upgrade did not result in any other unexpected impact to the existing synchronization process.
4343
2. Once validation is complete, switch the **V2 server** to be the active server and the **V1 server** to be the staging server. At this time, large groups that are in scope to be synced will be provisioned to Azure AD, as well as large O365 unified groups will be provisioned to AD, if group writeback is enabled.
4444
3. Validate that the **V2 server** is performing and processing large groups successfully. You may choose to stay at this step and monitor the synchronization process for a period.
@@ -50,31 +50,31 @@ The following steps will guide you through deploying the v2 endpoint using the s
5050
## Expectations of performance impact
5151
When using the V2 endpoint, performance gains are a function of the number of synced groups, size of those groups, and their group churn (the activity resulting from adding and removing users as members of the group). Using the new endpoint, without increasing the number, size, or churn of the synced groups, should result in shorter times for export and import to Azure AD.
5252

53-
However, these performance gains can be negated by the additional processing required when syncing large groups. You could end up increasing the overall sync time by adding a too many large groups to the sync process.
53+
However, the performance gains can be negated by the additional processing required when syncing large groups. You could end up increasing the overall sync time by adding a too many large groups to the sync process.
5454

55-
To gain a better understanding of how the addition of these new groups will impact your sync performance, it is recommended that you start by syncing only a few large groups with less than 100k members. You can then increase the number and size of groups by bringing more of them in scope, through OU, attribute, or max group size filtering. The performance improvements will be realized on the export and import tasks for the Azure AD connector, not the on-premises AD connector.
55+
To gain a better understanding of how the addition of the new groups will impact your sync performance, it is recommended that you start by syncing only a few large groups with less than 100k members. You can then increase the number and size of groups by bringing more of them in scope, through OU, attribute, or max group size filtering. The performance improvements will be realized on the export and import tasks for the Azure AD connector, not the on-premises AD connector.
5656

5757
## Deployment step by step
58-
The following 3 phases are an in-depth example of deploying the new V2 endpoint. Use these phases as a guideline for your deployment.
58+
The following three phases are an in-depth example of deploying the new V2 endpoint. Use the phases as a guideline for your deployment.
5959

60-
### Phase one – install and validate Azure AD Connect
60+
### Phase 1 – install and validate Azure AD Connect
6161
It is recommended that you first perform the steps to install or upgrade to [Azure AD Connect version 1.5.30.0](https://www.microsoft.com/download/details.aspx?id=47594) or later and validate the sync process before you go to the second phase where you will enable the V2 endpoint.
6262
On the Azure AD Connect server:
6363

6464

6565
1. [Optional] Take database backup
6666
2. Install or upgrade to [Azure AD Connect version 1.5.30.0](https://www.microsoft.com/download/details.aspx?id=47594) or later.
67-
3. Validate this install
67+
3. Validate the installation
6868

69-
### Phase two – enable the V2 endpoint
69+
### Phase 2 – enable the V2 endpoint
7070
The next step is to enable the V2 endpoint.
7171

7272
> [!NOTE]
7373
> After you have enabled the V2 endpoint for your server you will be able to see some performance improvements for your existing workload. You will not yet be able to sync groups with more that 50K members though.
7474
75-
To switch to the V2 endpoint, follow these steps:
75+
To switch to the V2 endpoint, use the following steps:
7676

77-
1. Open a Powershell prompt as administrator.
77+
1. Open a PowerShell prompt as administrator.
7878
2. Disable the sync scheduler after verifying that no synchronization operations are running:
7979

8080
`Set-ADSyncScheduler -SyncCycleEnabled $false`
@@ -89,19 +89,19 @@ To switch to the V2 endpoint, follow these steps:
8989

9090
`Set-ADSyncAADConnectorImportApiVersion 2`
9191

92-
![Powershell](media/how-to-connect-sync-endpoint-api-v2/endpoint1.png)
92+
![PowerShell](media/how-to-connect-sync-endpoint-api-v2/endpoint1.png)
9393

94-
You have now enabled the V2 endpoint for your server. Please take some time to verify that there are no unexpected results after enabling the V2 endpoint before you move to the next phase where you will increase the group size limit.
94+
You have now enabled the V2 endpoint for your server. Take some time to verify that there are no unexpected results after enabling the V2 endpoint before you move to the next phase where you will increase the group size limit.
9595
>[!NOTE]
9696
>The file / module paths may use a different drive letter, depending on the installation path provided when installing Azure AD Connect.
9797
9898

99-
### Phase three – increase the group membership limit
99+
### Phase 3 – increase the group membership limit
100100
After you have verified that the service is running without unexpected results, you can proceed to raising the group membership limit. It is recommended to first raise the membership limit to a slightly higher value, e g. 75K members, to see the larger groups syncing to Azure AD. Once you are satisfied with the results you can further raise the member limit.
101101

102102
The maximum limit is 250K members per group.
103103

104-
These are the steps to increase the membership limit:
104+
The following steps can be used to increase the membership limit:
105105

106106
1. Open Azure AD Synchronization Rules Editor
107107
2. Raise the maximum member limit for groups
@@ -125,34 +125,34 @@ These are the steps to increase the membership limit:
125125
![Edit synch rule](media/how-to-connect-sync-endpoint-api-v2/endpoint5.png)
126126

127127
9. Click Save
128-
10. Open admin Powershell prompt
128+
10. Open admin PowerShell prompt
129129
11. Re-enable the Sync Scheduler
130130

131131
`Set-ADSyncScheduler -SyncCycleEnabled $true`
132132

133133
>[!NOTE]
134-
> If Azure AD Connect Health is not enabled, please change the windows application event log settings to archive the logs, instead of overwriting them. These logs may be used to assist in future troubleshooting efforts.
134+
> If Azure AD Connect Health is not enabled, change the windows application event log settings to archive the logs, instead of overwriting them. The logs may be used to assist in future troubleshooting efforts.
135135
136136
>[!NOTE]
137-
> After enabling the new endpoint, you may see additional export errors on the AAD connector with name ‘dn-attributes-failure’. There will be a corresponding event log entry for each error with id 6949, . These errors are informational and do not indicate a problem with your installation, but rather that the sync process could not add certain members to a group in Azure AD because the member object itself was not synced to Azure AD.
137+
> After enabling the new endpoint, you may see additional export errors on the AAD connector with name ‘dn-attributes-failure’. There will be a corresponding event log entry for each error with id 6949, . The errors are informational and do not indicate a problem with your installation, but rather that the sync process could not add certain members to a group in Azure AD because the member object itself was not synced to Azure AD.
138138
139-
The new V2 endpoint code handles some types of export errors slightly different from how the V1 code handled this, and you may see more of these informational error messages when you use the V2 endpoint.
139+
The new V2 endpoint code handles some types of export errors slightly different from how the V1 code did. You may see more of the informational error messages when you use the V2 endpoint.
140140

141141
>[!NOTE]
142142
> When upgrading Azure AD Connect, ensure that the steps in Phase 2 are rerun, as the changes are not preserved through the upgrade process.
143143
144-
During subsequent increases to the group member limit in the **Out to AAD – Group Join** sync rule, a full sync is not necessary, so you can elect to suppress the full sync by running the following command in Powershell.
144+
During subsequent increases to the group member limit in the **Out to AAD – Group Join** sync rule, a full sync is not necessary, so you can elect to suppress the full sync by running the following command in PowerShell.
145145
`Set-ADSyncSchedulerConnectorOverride -FullSyncRequired $false -ConnectorName "<AAD Connector Name>" `
146146

147147
>[!NOTE]
148-
> If you have O365 unified groups that have more than 50k members, these groups will be read into Azure AD Connect, and if group writeback is enabled, they will be written to your on-premises AD.
148+
> If you have O365 unified groups that have more than 50k members, the groups will be read into Azure AD Connect, and if group writeback is enabled, they will be written to your on-premises AD.
149149
150150
## Rollback
151-
If, for whatever reason, you need to roll back the changes you made to enable the V2 endpoint, please follow these steps:
151+
If you have enabled the v2 endpoint and need to rollback, follow these steps:
152152

153153
1. On the Azure AD Connect server:
154154
a. [Optional] Take database backup
155-
2. Open an admin Powershell prompt:
155+
2. Open an admin PowerShell prompt:
156156
3. Disable the sync scheduler after verifying that no synchronization operations are running
157157

158158
`Set-ADSyncScheduler -SyncCycleEnabled $false`
@@ -168,7 +168,7 @@ If, for whatever reason, you need to roll back the changes you made to enable th
168168
4. Open Azure AD Synchronization Rules Editor
169169
5. Delete the editable copy of the **Out to AAD – Group Join** sync rule
170170
6. Enable the default copy of the **Out to AAD – Group Join** sync rule
171-
7. Open an admin Powershell prompt
171+
7. Open an admin PowerShell prompt
172172
8. Re-enable the Sync Scheduler
173173

174174
`Set-ADSyncScheduler -SyncCycleEnabled $true`
@@ -177,11 +177,11 @@ If, for whatever reason, you need to roll back the changes you made to enable th
177177
> When switching back from the V2 to V1 endpoints, groups synced with more than 50k members will be deleted after a full sync is run, for both AD groups provisioned to Azure AD and O365 unified groups provisioned to AD.
178178
179179
## Frequently asked questions 
180-
**Q:Can a customer use this capability in production?**
181-
</br>Yes, this can be used in production environments, with the caveat as mentioned before
180+
**Q:Can a customer use this feature in production?**
181+
</br>Yes, this can be used in production environments, with the caveat as mentioned before.
182182

183183
**Q:Who can the customer contact when things go wrong?**
184-
</br>If you need support when using this feature please open a support case
184+
</br>If you need support when using this feature you should open a support case.
185185

186186
**Q:Can I expect frequent updates to the public preview?**
187187
</br>There is a limited degree of ongoing changes during a Public Preview. You should assess this risk when deploying Public Preview features in production. 

0 commit comments

Comments
 (0)