skip to Main Content

Find Azure AD Connect accounts

Azure AD Connect uses 3 accounts to synchronize information from Windows Server Active Directory to Azure Active Directory. You sometimes want to check if these accounts have the correct permission or write them down before migrating Azure AD Connect to another server. In this article, you will learn how to find Azure AD Connect service accounts.

Azure AD Connect accounts

Azure AD Connect uses the following 3 accounts to synchronize data between Active Directory (on-premises) and Azure Active Directory (cloud):

  1. AD DS Connector account: Read/write information to Windows Server Active Directory
  2. ADSync Service account: Run the synchronization service and access the SQL database
  3. Azure AD Connector account: Write information to Azure AD
Find Azure AD Connect three accounts

Let’s find all 3 Azure AD service accounts and note them down.

AD DS Connector account

The AD DS Connector account, which reads/writes information to Windows Server Active Directory, can be in these two places.

Start Synchronization Service Manager on the Azure AD Connect Server. Click on Connectors > internal domain > Properties.

In our example, it’s the internal domain with the name exoip.local.

Find Azure AD Connect accounts Synchronization Service Manager internal domain

Click Connect to Active Directory Forest. The user name shows the AD DS Connector account.

In our example, it’s the user name MSOL_b3c27fcc1296.

Note: If the user name has the prefix MSOL_, Azure AD Connect created the account in Azure AD Connect setup.

Read more: Create AD DS Connector account »

Find AD DS Connector account
Another way to check the AD DS Connector account is to start Azure AD Connect on the Azure AD Connect Server. Click View or export current configuration. Click Next.
Find Azure AD Connect accounts view or export current configuration
The account shows the AD DS Connector account.
Find AD DS Connector account

ADSync Service account

The ADSync service account, which runs the synchronization service and accesses the SQL database, can be found in the following place.

Start Services (services.msc) on the Azure AD Connect Server. Double-click the service name Microsoft Azure AD Sync to open the properties.

Find Azure AD Connect accounts Microsoft Azure AD Sync service

Click on the tab Log On. This account shows the ADSync Service account.

Note: If the account name is ADSync, Azure AD Connect created the account in Azure AD Connect setup.

Find Azure AD Connect ADSync Service account

Azure AD Connector account

The Azure AD Connector account, which writes information to Azure AD, can be found in the following place.

Start Synchronization Service Manager on the Azure AD Connect Server. Click on Connectors > Microsoft domain > Properties.

In our example, it’s the Microsoft domain with the name M365x333525.onmicrosoft.com – AAD.

Find Azure AD Connect accounts Synchronization Service Manager Microsoft domain

Click Connectivity. The user name shows the Azure AD Connector account.

Find Azure AD Connector account

Another way to check the Azure AD Connector account is to sign in to Microsoft 365 admin center. Navigate to Health > Directory sync status.

The Directory sync service account shows the Azure AD Connector account.

Find Azure AD Connector account

Did this help you to check the Azure AD Connect service accounts?

Keep reading: Upgrade Azure AD Connect »

Conclusion

You learned how to find Azure AD Connect accounts. There are 3 accounts, and it’s good to know where you can find them before you migrate Azure AD Connect to a new server or if there are synchronization issues.

Did you enjoy this article? You may also like Configure Azure AD Multi-Factor Authentication. Don’t forget to follow us and share this article.

ALI TAJRAN

ALI TAJRAN

ALI TAJRAN is a passionate IT Architect, IT Consultant, and Microsoft Certified Trainer. He started Information Technology at a very young age, and his goal is to teach and inspire others. Read more »

This Post Has 0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *