Skip to content

Commit d4755e0

Browse files
authored
Merge pull request #106230 from MikeRayMSFT/patch-1
Clean up
2 parents 4ad2ff9 + 4a7e83d commit d4755e0

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

articles/active-directory/hybrid/reference-connect-accounts-permissions.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,11 +50,10 @@ In addition to these three accounts used to run Azure AD Connect, you will also
5050
> [!NOTE]
5151
> It is supported to manage the administrative accounts used in Azure AD Connect from an ESAE Administrative Forest (also know as "Red forest").
5252
> Dedicated administrative forests allow organizations to host administrative accounts, workstations, and groups in an environment that has stronger security controls than the production environment.
53-
> To learn more about dedicated administrative forests please refer to [ESAE Administrative Forest Design Approach](https://docs.microsoft.com/windows-server/identity/securing-privileged-access/securing-privileged-access-reference-material#esae-administrative-forest-design-approach)
54-
>>>>>>> e683a61b0ed62ae739941410f658a127534e2481
53+
> To learn more about dedicated administrative forests please refer to [ESAE Administrative Forest Design Approach](https://docs.microsoft.com/windows-server/identity/securing-privileged-access/securing-privileged-access-reference-material#esae-administrative-forest-design-approach).
5554
5655
> [!NOTE]
57-
> The Global Administrator role is not required after the initial setup and the only required account will be the **Directory Synchronization Accounts** role account. That does not necssarily mean that you will want to just remove the account with the Global Administrator role. It is better to change the role to a less powerful role, as totally removing the account may introduce issues if you ever need to re-run the wizard again. By reducing the privilege of the role you can always re-elevate the priviliges if you have to utilize the Azure AD Connect wizard again.
56+
> The Global Administrator role is not required after the initial setup and the only required account will be the **Directory Synchronization Accounts** role account. That does not necessarily mean that you will want to just remove the account with the Global Administrator role. It is better to change the role to a less powerful role, as totally removing the account may introduce issues if you ever need to re-run the wizard again. By reducing the privilege of the role you can always re-elevate the privileges if you have to utilize the Azure AD Connect wizard again.
5857
5958
## Installing Azure AD Connect
6059
The Azure AD Connect installation wizard offers two different paths:

0 commit comments

Comments
 (0)