📎 AI Summary:
The thread discusses the challenge of synchronizing approximately 20,000 Office 365 (Azure AD) accounts, including passwords, with an on-premises Windows Server 2016 Active Directory. The participants clarify that there is no straightforward method to reverse sync from Azure AD to on-prem AD or to transfer passwords directly, as tools like AAD Connect only support sync from on-prem to Azure. The suggested workaround involves creating new on-prem user accounts with default passwords and having users reset their passwords, which then sync to Azure AD. The overall sentiment indicates that direct synchronization of existing account passwords from Azure AD to on-prem AD is not feasible.

jorfernand

New Member
Joined
Feb 4, 2020
Messages
3
Thread Author #1
Hi everyone
We have an Office 365 tenant (for education) , with an 20,000 accounts (approximate), we want to send all these accounts with their passwords, to an active directory (Windows Server 2016), but we do not know how.
If it were the other way around, we would use Azure AD Conect, but I see that doing so is impossible.
Could someone please give me some idea?
Thank you so much
 

Solution
It's not possible. You'd need to import all the users with a default password and have them reset it on the first login. Then AAD Connection will replicate the password up.

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
There used to be DirSync but thats been deprecated in favor of AAD Connect which as you mentioned only syncs on-prem to Azure. I don't think there is any easy way to do the reverse. You may have to export all of your AD objects and import them into your on-prem system.
 

jorfernand

New Member
Joined
Feb 4, 2020
Messages
3
Thread Author #3
There used to be DirSync but thats been deprecated in favor of AAD Connect which as you mentioned only syncs on-prem to Azure. I don't think there is any easy way to do the reverse. You may have to export all of your AD objects and import them into your on-prem system.
Thank you for responding, that is exactly the problem, there is no way to perform that synchronization.
On the other hand, how could I do to create the same Azure users to the Active Directory, but with their same passwords?
 

Neemobeer

Windows Forum Team
Staff member
Joined
Jul 4, 2015
Messages
8,995
It's not possible. You'd need to import all the users with a default password and have them reset it on the first login. Then AAD Connection will replicate the password up.
 

Solution