Oct 07 2020
- last edited on
Jan 14 2022
I have the following topic that I couldn't find how to handle. We have many existing Office365 users (the organization is a University). We need to create a new empty local Active Directory and sync those users from Azure to the local AD (one way from Azure to local AD), so we can have the local AD as authentication provider for some local applications. We need to be able to use the same username and password, that is already set in Azure. I read many Microsoft articles but always the the sync is in the opposite direction to what we need.
Is this possible and how?
Oct 07 2020 04:16 AM
All your users are actually stored not in Office365 but in Azure. As far as i understand you can do this in two steps:
1) Export Azure users
2) Import exported users in local AD
But im not sure you can export them with their passwords.
Here is the example: https://vmlabblog.com/2020/02/how-to-export-an-azure-ad-account-to-the-ad/
Oct 07 2020 04:19 AM
Aside for some very specific situations such as password and certain groups, write back from AzureAD to on Prem AD DS is not possible. In the past we have created a new on prem domain, exported out the relevant data from Azure AD, import it into the local AD then set up AzureAD connect. This would make the on Prem AD the source of authority going forward so changes would need to be done in AD DS and not Office365 going forward.
I've done this for small clients, but not at the scale of a university.
Jun 06 2023 02:49 PM
In the portal:
I think I used AzureAD Powershell back in the day (been a while since I've done this) Get-AzureADUser might be a good starting point.
Hope this helps,