Forum Discussion

Mark McClughan's avatar
Mark McClughan
Copper Contributor
Aug 30, 2018

Need to change AAD service account

We are using AD connect to sync users/passwords from on premise but we need to change the username and or password of the account used on the AAD connector. 

Thanks

Azure Active Directory (AAD)
  • Nestori Syynimaa's avatar
    Nestori Syynimaa
    Aug 30, 2018

    Haven't tested but this should work:

    1. Create a new account for sync and give it a "Directory Synchronization Accounts" -role

    New-MsolUser -UserPrincipalName sync@company.onmicrosoft.com -DisplayName "Sync Account" -Password yourpassword -PasswordNeverExpires $true -ForceChangePassword $false
    Add-MsolRoleMember -RoleName "Directory Synchronization Accounts" -RoleMemberEmailAddress sync@company.onmicrosoft.com

    2. On AAD Connect computer, run the following command and give the new credentials

    Add-ADSyncAADServiceAccount

     

    See here for more details

  • Nestori Syynimaa's avatar
    Nestori Syynimaa
    MVP
    Aug 30, 2018

    Haven't tested but this should work:

    1. Create a new account for sync and give it a "Directory Synchronization Accounts" -role

    New-MsolUser -UserPrincipalName sync@company.onmicrosoft.com -DisplayName "Sync Account" -Password yourpassword -PasswordNeverExpires $true -ForceChangePassword $false
    Add-MsolRoleMember -RoleName "Directory Synchronization Accounts" -RoleMemberEmailAddress sync@company.onmicrosoft.com

    2. On AAD Connect computer, run the following command and give the new credentials

    Add-ADSyncAADServiceAccount

     

    See here for more details

Resources