Azure AD Connect synchronizes changes to user accounts every 30 minutes by default. This frequency applies only to item attributes, not user passwords. Password hashes are suppoed to be synchronized instantly.
In certain cases, you might want to force a sync cycle to replicate important changes as opposed to waiting long minutes or even half an hour for the scheduled event.
There are two types of synchronization methods: initial and delta.
Delta sync only imports and synchronizes account changes, the initial sync will import and sync all accounts and attributes from scratch.
1. Invoke sync locally on the ADSync computer
# Import the AAD module PS C:\> Import-Module -Name "C:\Program Files\Microsoft Azure AD Sync\Bin\ADSync" # Invoke delta sync locally PS C:\> Start-ADSyncSyncCycle -PolicyType delta # Invoke full sync locally PS C:\> Start-ADSyncSyncCycle -PolicyType initial
2. Invoke sync remotely from any domain joined computer
# Invoke delta sync remotely Invoke-Command -ComputerName [AAD computer name here] -ScriptBlock {Start-ADSyncSyncCycle -PolicyType delta} # Invoke full sync remotely Invoke-Command -ComputerName [AAD computer name here] -ScriptBlock {Start-ADSyncSyncCycle -PolicyType initial}
Comments