Ad-Connect staging vs Active

%3CLINGO-SUB%20id%3D%22lingo-sub-2147696%22%20slang%3D%22en-US%22%3EAd-Connect%20staging%20vs%20Active%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2147696%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20have%20a%20single%20AD%20domain%20and%20forest.%26nbsp%3B%20We%20want%20to%20install%20multiple%20AD-Connect%20servers%20to%20prevent%20a%20single%20point%20failure.%26nbsp%3B%20We%20use%20Password%20Through%20Authentication%20method.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20we%20have%20multiple%20servers%20in%20active%20mode%20so%20we%20do%20not%20need%20to%20worry%20about%20bringing%20a%20staging%20server%20back%20in%20operation%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

We have a single AD domain and forest.  We want to install multiple AD-Connect servers to prevent a single point failure.  We use Password Through Authentication method.

 

Can we have multiple servers in active mode so we do not need to worry about bringing a staging server back in operation ? 

 

 

 

 

4 Replies

@AzSupport 

 

No, multiple active connectors from single forest to single AAD is not supported. You can only have one active connector in your case.

@PerhapsCloud 

 

We have two separate data centers, 

 

We would like to have two active AD-Connect so if one datacenter fails the other AD-connect will work without manual intervention. Kind of HA, no?

 

 

@AzSupport 

 

It doesn't matter how many datacenters. As long as they share the same AD forest, and the same AAD, you can only have one active connector. However, whether you want to make a backup of the current good state connector and have it ready at another site, or leverage vSphere cluster HA, is up to you. The bottom line is it can only have one active connector running at a time.

@AzSupport 

 

Hi you cannot have more that one active server and it's mentionned in the documentation  : 

"Only one synchronization server can be in the primary role and actively exporting configuration changes to Azure. All other servers must be placed in Staging mode."

 

However the migration process is pretty easy  if you have staging server ready to use in case of datacenter failure 

 

How to import and export Azure AD Connect configuration settings | Microsoft Docs