Activate directory synchronization

Publikováno: březen 2013

Platí pro: Office 365, Windows Azure, Windows Intune

You must activate directory synchronization before you install the Synchronizační nástroj služby Active Directory. When you activate directory synchronization, you are turning on this feature across your tenant and all the Microsoft cloud services that you are subscribed to. For more information about how activation in Windows Azure AD works, see Synchronizace adresářů a zdroj autority.

Before you activate directory synchronization, run the Microsoft Deployment Readiness Tool. This tool inspects your Active Directory environment, and then provides a report that includes a prerequisite check and an attribute assessment that are specific to the Synchronizační nástroj služby Active Directory requirements.

If your environment doesn’t meet these requirements, the tool lists the changes you have to make before you can begin directory synchronization. It’s much easier to make directory changes before you activate and install the Synchronizační nástroj služby Active Directory than to troubleshoot configuration errors after you have activated directory synchronization.

An important statistic to consider in the report that is created by the Deployment Readiness tool is the estimated total number of objects. This number is listed under Statistic in the Deployment Readiness tool. You must follow the recommendations made by the tool if you exceed the default total number of objects that the directory synchronization installation allows.

If the total number of objects in your on-premises domain exceeds 50,000, you will need to contact Support before you activate directory synchronization. If your object count exceeds 50,000 and you don’t contact Support to increase your licensing count, directory synchronization will not complete.

Další informace Následující kroky lze dokončit pomocí portálu účtu služeb Office 365, portálu účtu služby Windows Intune nebo pomocí portálu služby Windows Azure AD. Závisí to na tom, které služby má vaše organizace předplaceny. Tímto způsobem fungují portály jako front-end rozhraní, do kterých se načítají data adresářů přidružená ke klientovi služby Windows Azure AD vaší organizace. Další informace o používání portálů ke správě klientů naleznete v tématu Správa klienta služby Windows Azure AD.

To activate directory synchronization, use the following steps:

  1. Install and run the Microsoft Deployment Readiness Tool.

  2. Depending on which portal you are using, do one of the following:

    1. If you are using Office 365 or another account portal, click Users, click Set up next to Active Directory synchronization, and then proceed to the next step.

    2. If you are using the Windows Azure Management Portal, click Active Directory, click on your directory showing on the Enterprise Directory page, click Directory Integration, and then proceed to the next step.

    3. If you are using the Windows Azure AD Preview Portal, in the left pane, click Integration, click Deploy directory sync, and then proceed to the next step.

  3. Click Activate.

    WarningVarování
    If you are reactivating directory synchronization after it was previously deactivated, there is a potential to overwrite cloud directory object data. In this case, we recommend that you first review the topic Synchronizace adresářů a zdroj autority to understand the variables and consequences of reactivating directory synchronization in your environment.

Poznámka

The Windows PowerShell cmdlet to activate or reactivate directory synchronization is Set-MsolDirSyncEnabled –EnableDirSync $true. For more information, see Deactivate directory synchronization.

Next step: Install the Directory Sync tool

After you have activated directory synchronization, you are ready to Set up your directory sync computer.