If AAD Connect is offline for an extended period of time

[hyperloop]

Hi, I'm running Azure AD Connect with password hash sync.  My current setup is working fine, but I want to know what the impact would be if there's a bad outage that takes on-premises environments offline. 

Can anyone describe the impact if Azure AD Connect is offline for an extended period? Possibly, a month or more?

Will the end users eventually get locked out if Azure AD Connect Connect does not sync for a certain period of time?

[#2]

New changes will not be synced of course, operational as normal otherwise! Of course this also depends on how you authenticate! If you are using adfs or pass- through auto you need to switch this!

You could also turn off sync with ad connect in 365 and your users will be cloud only users! You can later connect merge the accounts if you have a new environment up and running! If you’re fixing the old just leave it!

Adam

[#3]

Hi @hyperloop

If it was in a scenario such as an outage of a month (a long period) you would likely disable Azure AD Connect as outlined here

https://docs.microsoft.com/en-us/office365/enterprise/turn-off-directory-synchronization#turn-off-di...

Then the users would convert to Cloud users again (not synchronised) and then you could change passwords if needed.

Once it was back up you can then resynchronise the users through soft matching.

Hope that answers your question!

Best, Chris

[#4]

If you have password sync enabled, the cloud passwords are set to never expire, so even in the event of such long outage users will not get locked out.