Force Azure AD Sync (Start-ADSyncSyncCycle) on a different managed domain

Question

Hi,

We would like to run an AD sync (Start-ADSyncSyncCycle -PolicyType Delta) after a new user is created.

Unfortunately, it looks like this script only works for servers that are on the same domain as the Adaxes service is installed. This is an issue because we are using Adaxes to manage multiple domains (MSP environment), and we would like the AD sync to run after creating a user in any of the domains.

What is the recommended way to achieve this?

Thanks, Max

Answer 1

Hello Max,

Unfortunately, that is not something we can assist you with as it is a networking question not related to Adaxes. Using the command executed in the script is the only way. As such, you just need to find a way to connect to the corresponding server in your script.

Comments

Here is how we run delta sync as a PS command in adaxes. We "remotely" run it on any domain controller server. Your adaxes server must have visability to domain contoller of course.

We have it run after user creation and have it as a manual push button action in the web home page for my techs. We had to take it off user modify, because when we would export CSV info nightly to our users it would spam the delta sync and MS would block us.

$dirsyncServer = "srv-001.ourdomain.local" # TODO: modify me

Invoke-Command -ComputerName $dirsyncServer -ErrorAction Stop -ScriptBlock {
    Import-Module "C:\Program Files\Microsoft Azure AD Sync\Bin\ADSync\ADSync.psd1"

    Start-ADSyncSyncCycle -PolicyType Delta
}