An Engineers Notebook

Azure AD Connect

Prerequisites

  • Domain forest functional level must be 2003 or higher
  • For Password Writeback your domain controllers must running 2008 with the latest service pack.
  • For Password synchronization domain controllers must be running 2008 R2 with the latest service pack.
  • Azure AD Connect must be installed on a server running 2008 or later. This can be a domain controller or a member server if you are using express settings. If you use advanced settings, the server can be stand-alone with the exception of using SBS or Windows Server Essentials.
  • If Azure AD Connect is installed on 2008, ensure all of the latest hotfixes are installed from windows update. The installation will not start with an unpatched server.
  • If ADFS is deployed the server running ADFS must be Server 2012 R2 or later with WinRM enabled.
  • If ADFS is being deployed an SSL certificate is required.
Hardware Requirements
The table below shows the minimum requirements for the Azure AD Connect sync computer.
Number of objects in Active DirectoryCPUMemoryHard drive size
Fewer than 10,0001.6 GHz4 GB70 GB
10,000–50,0001.6 GHz4 GB70 GB
50,000–100,0001.6 GHz16 GB100 GB
For 100,000 or more objects the full version of SQL Server is required
100,000–300,0001.6 GHz32 GB300 GB
300,000–600,0001.6 GHz32 GB450 GB
More than 600,0001.6 GHz32 GB500 GB

The minimum requirements for computers running AD FS or Web Application Servers is the following:

  • CPU: Dual core 1.6 GHz or higher
  • MEMORY: 2GB or higher
  • Azure VM: A2 configuration or higher

Software Requirements

If you use a separate SQL Server, then these requirements apply:

  • Azure AD Connect supports all flavors of Microsoft SQL Server from SQL Server 2008 (with SP4) to SQL Server 2014. Microsoft Azure SQL Database is not supported as a database.
  • You must use a case-insensitive SQL collation. These are identified with a _CI_ in their name. It is not supported to use a case-sensitive collation, identified by _CS_ in their name.
  • You can only have one sync engine per database instance. It is not supported to share the database instance with FIM/MIM Sync, DirSync, or Azure AD Sync.


Leave a Reply

Your email address will not be published.