AADConnect PowerShell: Manual operations


Importing PowerShell Module

Import-Module ADSync

Check current sync schedule

Get-ADSyncScheduler

To set sync interval to every 3 hours

Set-AdSyncScheduler -customizedsycncecleinterval 03:00:00

Start by telling the scheduler to stop its current cycle with the PowerShell cmdlet 

Stop-ADSyncSyncCycle

To initiate a full sync cycle, run

Start-ADSyncSyncCycle -PolicyType Initial

Force Synchronisation

It could be that you have an urgent change which must be synchronized immediately which is why you need to manually run a cycle.

Start-ADSyncSyncCycle -PolicyType Delta

To check current sync status

Get-ADSyncConnectorRunStatus

Example,

PS C:\Users\Administrator> Start-ADSyncSyncCycle -PolicyType Delta
PS C:\Users\Administrator> Get-ADSyncConnectorRunStatus
   RunState ConnectorName
   -------- -------------
   Busy mfa01.onmicrosoft.com - AAD

 

Manual sync for password

$adConnector  = "mfalab3.com"
$aadConnector = "mfa01.onmicrosoft.com - AAD"
$c = Get-ADSyncConnector -Name $adConnector
$p = New-Object Microsoft.IdentityManagement.PowerShell.ObjectModel.ConfigurationParameter “Microsoft.Synchronize.ForceFullPasswordSync”, String, ConnectorGlobal, $null, $null, $null
$p.Value = 1
$c.GlobalParameters.Remove($p.Name)
$c.GlobalParameters.Add($p)
$c = Add-ADSyncConnector -Connector $c
Set-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $false
Set-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector -TargetConnector $aadConnector -Enable $true

Example

PS C:\Users\Administrator> Get-ADSyncAADPasswordSyncConfiguration -SourceConnector $adConnector
SourceConnector  TargetConnector  Enabled
---------------  --------------- -------
mfalab3.com mfa01.onmicrosoft.com - AAD  False

Comments (0)

Skip to main content