SOLVED

Need to change AAD service account

Copper Contributor

We are using AD connect to sync users/passwords from on premise but we need to change the username and or password of the account used on the AAD connector. 

Thanks

2 Replies
best response confirmed by Mark McClughan (Copper Contributor)
Solution

Haven't tested but this should work:

1. Create a new account for sync and give it a "Directory Synchronization Accounts" -role

New-MsolUser -UserPrincipalName sync@company.onmicrosoft.com -DisplayName "Sync Account" -Password yourpassword -PasswordNeverExpires $true -ForceChangePassword $false
Add-MsolRoleMember -RoleName "Directory Synchronization Accounts" -RoleMemberEmailAddress sync@company.onmicrosoft.com

2. On AAD Connect computer, run the following command and give the new credentials

Add-ADSyncAADServiceAccount

 

See here for more details

Thanks Nestori,

1 best response

Accepted Solutions
best response confirmed by Mark McClughan (Copper Contributor)
Solution

Haven't tested but this should work:

1. Create a new account for sync and give it a "Directory Synchronization Accounts" -role

New-MsolUser -UserPrincipalName sync@company.onmicrosoft.com -DisplayName "Sync Account" -Password yourpassword -PasswordNeverExpires $true -ForceChangePassword $false
Add-MsolRoleMember -RoleName "Directory Synchronization Accounts" -RoleMemberEmailAddress sync@company.onmicrosoft.com

2. On AAD Connect computer, run the following command and give the new credentials

Add-ADSyncAADServiceAccount

 

See here for more details

View solution in original post