Thursday, October 2, 2014

Attributes synchronized to Azure AD

http://msdn.microsoft.com/en-us/library/azure/dn764938.aspx

From above link:

--snip--
With Azure AD Sync, you can remove individual attributes from being synchronized.
Some services might not behave as expected when certain attributes are removed. The affected attributes are listed with their Active Directory LDAP name in the Install the AADSync Service.
There are also some attributes that might be listed with a different name in other interfaces. For example, the attribute l from Active Directory is tracked as city in Azure AD.
--snip--

Follow the link on top to see the full article, it is very useful.

Wednesday, October 1, 2014

MVP Award

Awarded MVP for the 17th year!


Dear Jimmy Andersson,

Congratulations! We are pleased to present you with the 2014 Microsoft� MVP Award!


 

Friday, September 26, 2014

Comparison of Microsoft's sync tools to the cloud.

Below are a comparison (copy/pasted from the source) of the different Sync tools from Microsoft. It was updated on September 5, 2014. To be absolutely updated go to http://msdn.microsoft.com/en-us/library/azure/dn798669.aspx since things will change over time.

On-Premises to Cloud Synchronization

 
Feature Azure Active Directory Synchronization Tool (DirSync) Azure Active Directory Synchronization Services (AAD Sync) Forefront Identity Manager 2010 R2 (FIM)
Connect to single on-premises AD forestXXX
Connect to multiple on-premises AD forests
XX
Connect to single on-premises LDAP directory (no AD at all)
CSX
Connect to multiple on-premises LDAP directories
CSX
Connect to on-premises AD and on-premises LDAP directories
CSX
Connect to custom systems (i.e. SQL, Oracle, MySQL, etc.).
CSX
Synchronize customer defined attributes (directory extensions)CSCS

Cloud to On-Premises Synchronization

Feature Azure Active Directory Synchronization Tool (DirSync) Azure Active Directory Synchronization Services (AAD Sync) Forefront Identity Manager 2010 R2 (FIM)
Write-back of devicesXCS
Attribute write back (for Exchange hybrid deployment )XXX
Write-back of users, groups objectsCSCS
Write-back of passwords (from SSPR and password change)CSCS
Write-back of customer defined attributes (directory extensions)CSCS

Authentication Feature Support

Feature Azure Active Directory Synchronization Tool (DirSync) Azure Active Directory Synchronization Services (AAD Sync) Forefront Identity Manager 2010 R2 (FIM)
Password Hash Sync for single on-premises AD forestXCS
Password Hash Sync for multiple on-premises AD forests
CS
Federation (SSO)XXX

Set-up and Installation

Feature Azure Active Directory Synchronization Tool (DirSync) Azure Active Directory Synchronization Services (AAD Sync) Forefront Identity Manager 2010 R2 (FIM)
Supports installation on a Domain ControllerXX
Supports installation using SQL ExpressXX
Step-up from DirSync to AADSync


Localization Windows Server languages)XCS
Support for Windows Server 2008 and Windows Server 2008 R2XXX
Support for Windows Server 2012 and Windows Server 2012 R2XX

Filtering and Configuration

Feature Azure Active Directory Synchronization Tool (DirSync) Azure Active Directory Synchronization Services (AAD Sync) Forefront Identity Manager 2010 R2 (FIM)
Filter on Domains and Organizational UnitsXXX
Filter on attribute values on objectsXXX
Allow minimal set of attributes to be synchronized "MinSync"
X
Allow different service templates to be applied for attribute flows
X
Allow removing attributes from flowing from AD to AAD
X
Allow advanced customization for attribute flows
XX

Thursday, August 21, 2014

Powershell -DomainMode and -ForestMode

When you use PowerShell to install a new forest. The values for -DomainMode and -ForestMode are the following:

     -- Windows Server 2003: 2 or Win2003
     -- Windows Server 2008: 3 or Win2008
     -- Windows Server 2008 R2: 4 or Win2008R2
     -- Windows Server 2012: 5 or Win2012
     -- Windows Server 2012 R2: 6 or Win2012R2

You can use the numeric value or you can write it in text as shown above.

Friday, August 8, 2014

Azure IaaS Cost Estimator Tool


Until now, when evaluating datacenter compute resources and estimating costs in the cloud has been a challenge. Typically we�re looking at a physical or virtual machine configuration such as CPU size, memory, disk space and so on. However, there are other resources that are more difficult to estimate such as bandwidth usage, storage transactions, and estimated future capacity.

Imagine having 50, 100, or more servers. Performing estimates for 100�s of servers would not only be time consuming, it would be difficult because we�re only looking at a snapshot in time. We know over the course of a day or week a server�s consumption model of resources will change. We may end up missing critical information that could end up in underestimating the cost of a VM or service in the cloud. Underestimating resources could lead to unexpected charges. Not an ideal situation when we�re looking to either reduce costs or migrate resources to the cloud.


You will find the tool and more information here: http://blogs.technet.com/b/cbernier/archive/2014/08/05/microsoft-azure-iaas-cost-estimator-tool.aspx

Tuesday, August 5, 2014

Azure AD Connect

Microsoft created the Azure AD Connect to help you easily connect your on-premises Windows Server Active Directory to your tenant in Azure Active Directory with only 4 clicks!

To learn more visit our documentation at http://technet.microsoft.com/en-us/library/dn776280.aspx and the Active Directory Team Blog at http://blogs.technet.com/b/ad/archive/2014/08/04/connecting-ad-and-azure-ad-only-4-clicks-with-azure-ad-connect.aspx.