May 2019
Intermediate to advanced
620 pages
21h 41m
English
Content preview from Active Directory Administration Cookbook
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Configuring the proper permissions for Azure AD Connect service accounts
The first step to allow Password Writeback is to allow the service account(s) for the Azure AD Connect installations in your organization to write back the passwords to user objects in scope.
Perform these steps to create a group, make the Azure AD Connect service account(s) members of the group, and delegate the permissions to the group:
- Open Active Directory Users and Computers (dsa.msc).
- From the View menu, turn on Advanced features:
- From the taskbar, click the New Group icon.
- In the New Object - Group screen, specify values for the following fields:
- Specify the ...