Azure AD sync to on premise AD

[Muhammad Qasim]

Hi

My company has Azure AD with users using Office 365 accounts sine quite some time. now we deployed on premises Windows Server Active Directory. 

My requirement is to sync Azure AD back to on prmises Windows AD?

Can someone please help if it is possible. if so, then how to do,

Regards

[#2]

@Muhammad Qasim 

Hi, so the process of Azure AD connect works only from on-premises to cloud.  Whilst it is capable of things like password write back and device writeback, you cannot create users in Azure AD and sync them back to on-premises AD.

What you will need to do is as follows;

1). Ideally install an Exchange on-premises management server to manage attributes as the source of authority is going to be on-premises AD.  You can get a free Exchange 2016 hybrid licence key if you have Office 365 Enterprise licences for your users.

2). Setup your on-premises AD objects with the same UPN and SMTP addresses that are set in Azure AD

3).  Setup Azure AD connect to use SMTP matching and synchronise your AD to Azure AD.

You can find further information on the process below;

https://support.microsoft.com/en-gb/help/2641663/use-smtp-matching-to-match-on-premises-user-account...

https://gallery.technet.microsoft.com/office/Immutableid-Hard-Match-in-d3518b08

https://docs.microsoft.com/en-gb/azure/active-directory/hybrid/how-to-connect-install-existing-tenan...

Hope this helps

[#3]

Hi Mohammed, Check this article please
https://www.moh10ly.com/how-to-sync-cloud-user-to-on-premises-ad

[#4]

Hi Mohammed, Check this article please:

https://www.alitajran.com/sync-azure-ad-user/

[#5]

@Muhammad Qasim 

I would suggest to have your plan first, are you going to authenticate from local AD, or AAD? How about SSO, required? If yes, SSO with AAD or local AD?

Please refer below URL for your planning idea:

https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/identity/azure-ad