ADConnect Account setup

Create Service Account for AADconnect Onprem ( then sync to Azure AD ) (obv put in Password state )
Add this to Hybrid Identity Admin ( NOT GLOBAL ADMIN )
Remove this User as Domain Admin Onprem just leave Domain users
Set the Permissions to the account
Install-WindowsFeature RSAT-AD-Tools
Import-Module “C:\Program Files\Microsoft Azure Active Directory Connect\AdSyncConfig\AdSyncConfig.psm1”
$adaccountna =”CN=svc_aadconnect,OU=Services,OU=Infrastructure,OU=Users,OU=FilmVic,DC=encom,DC=net”
Set-ADSyncMsDsConsistencyGuidPermissions -ADConnectorAccountDN $adaccountna -Confirm:$false
Set-ADSyncPasswordHashSyncPermissions -ADConnectorAccountDN $adaccountna -Confirm:$false
Set-ADSyncUnifiedGroupWritebackPermissions -ADConnectorAccountDN $adaccountna -Confirm:$false
Set-ADSyncExchangeHybridPermissions -ADConnectorAccountDN $adaccountna -Confirm:$false
Set-ADSyncExchangeMailPublicFolderPermissions -ADConnectorAccountDN $adaccountna -Confirm:$false
Set-ADSyncRestrictedPermissions -ADConnectorAccountDN $adaccountna -Credential $credential
Set-ADSyncPasswordWritebackPermissions -ADConnectorAccountName svc_adconnect -ADConnectorAccountDomain domain.local -Confirm:$false
SSO needs to be done with a domain admin account , however the creds for this are not saved

(No Ratings Yet)