Learn how to enable group object and membership replication from Entra ID to Active Directory, leveraging Entra governance features for AD-trusting services. This 32-minute video tutorial covers the entire process, from understanding Entra group governance to configuring writeback and managing synchronization. Explore key topics such as supported group types, attribute mappings, scope filters, and handling cloud-only users. Gain insights into important considerations like replication schedules and the critical importance of not editing group membership directly in AD. The tutorial also touches on licensing requirements and provides a comprehensive summary of the Entra Group Provision to AD process, equipping you with the knowledge to effectively implement and manage this powerful feature in your hybrid environment.
Entra Group Provision to Active Directory - Leveraging Entra Governance Features On-Premises
John Savill's Technical Training via YouTube
Overview
Syllabus
- Introduction
- Entra group governance
- What about AD?
- Synchronization and source of authority
- Group writeback from Entra ID
- How it works
- Requirements
- Configuration of writeback
- Supported group types
- Configuring target container in AD
- Scope filters
- Attribute mappings
- Starting the sync and logs
- What about cloud only user handling?
- Key group considerations
- Replication schedule
- DO NOT EDIT MEMBERSHIP IN AD!
- Licensing
- Summary
- Close
Taught by
John Savill's Technical Training
