On June 3, the Directory Synchronization tool was updated. It is now known as the Windows Azure Active Directory Sync tool and is available to Office 365 customers within their portal.
The following is an update to an earlier post, “Force DirSync for Office 365“.
There might be occasion where a change in your on-premise Active Directory will need to be forcibly replicated to your Office 365 account. Maybe it is for a new user or a change in a user attribute. In any case, the standard scheduled sync occurs every 3 hours. However, we have been given the tools to synchronize those changes on our terms.
From your DirSync server, open PowerShell and navigate to C:\Program Files\Windows Azure Active Directory Sync. Then enter, .\DirSyncConfigShell.psc1. A new PowerShell console will open.
From this console, type Start-OnlineCoexistenceSync and press enter. This command will begin a synchronization of the changes made in the on-premise AD to Office 365. It is the same command that is automatically scheduled to run every 3 hours.
Once the synchronization is complete, the Office 365 Users management portal will show “Last synced less than an hour ago“. The Application log in the Event Viewer on the DirSync server will show several events. The primary one to watch for is Directory Synchronization Event ID 114–this shows us the “Export cycle completed. Tracking id: …“
Microsoft Forefront Identity Manager (FIM) 2010 R2…
FIM is another way to check if the sync has completed successfully and, maybe even more importantly, check what users and attributes have been synced. FIM is installed with DirSync. FIM has a application know as the MIIS client that can be located in C:\Program Files\Windows Azure Active Directory Sync\SYNCBUS\Synchronization Service\UIShell. In this folder, double-click miisclient.exe to open Forefront Synchronization Service Manager (FSSM).
From the Operations section of FSSM, we can monitor the sync process and granular changes. In the Export Statistics section (bottom left of window) within Operations, we can see (and even double-click) the adds, updates, renames and deletes. In the Object Details, granular information can be viewed by selecting the properties of a Distinguished Name.
by Todd Nelson (@oddytee)