Chat now with support
Chat with Support

On Demand Migration Current - Active Directory Modern Password Sync Setup Quick Start Guide

Introduction

The goal of this guide is to provide a step-by-step walk through of how to set up the Modern Real Time Password Synchronization for user objects between your On-Premises Active Directory environments. Directory Sync will monitor source Active Directory password changes in real time and synchronize the changes to matched or newly created user objects in the target Active Directory.

To set up Directory Sync for Real Time Password Synchronization, source user objects must be matched to existing or newly created user objects in the target environment. To accomplish this, four (4) configurations must be completed prior to the first synchronization.

  1. Set up Environments.

  2. Set up Local Agents.

  3. Set up Templates.

  4. Set up Workflows.

The next section will provide the list of requirements needed to successfully Synchronization Password between two Active Directory environments.

Requirements

In order to facilitate the Real Time Password Synchronization, the following is a list of minimum requirements to get set up using Directory Sync with your On-Premises Active Directory. 

Preparing the Source and Target Domains

Preparing the Source and Target Domains

  • Any third-party anti-virus program that prevents access to the LSASS process may need to be updated with a whitelist entry for the Password Sync executable.

  • Quest Directory Sync Password Filter configured for at least one Domain Controller per Domain. (Required for Modern Password Sync)

  • Domain Controller Operating System Version must be Server 2016 and up.

    • Windows Server 2016

    • Windows Server 2019

    • Windows Server 2022

Account Permissions

  • One (1) Local Administrator Account for each Microsoft Forest and/or Domain that has permissions to create, update or delete depending on the scope of your Directory Sync workflows.

  • The Password Sync functionality requires that either a domain admin role or built-in admin role be granted to the service account.

  • The Password Filter requires administrator rights to install on the domain controller.

The next section will provide a step-by-step guide on how to set up Password Synchronization for Active Directory environments.

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating