Azure AD Connect - Source Anchor Change

VIGNESHWARAN M 1 Reputation point
2020-12-09T10:11:26.403+00:00

Hi,

We are migrating users from one forest to another forest and using single Azure AD connect to sync onpremise accounts with Azure. Currently both forest using "Object GUID" as source anchor in AAD connect. Is it recommended to change source anchor as "ms-DS-Consistency" in both forests before starting the migration? We are using Office365 for email and not onpremise exchange services.

Thanks in advance.

Microsoft Office Online Server
Microsoft Office Online Server
Microsoft on-premises server product that runs Office Online. Previously known as Office Web Apps Server.
639 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,700 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. VipulSparsh-MSFT 16,271 Reputation points Microsoft Employee
    2020-12-09T11:27:35.51+00:00

    @VIGNESHWARAN M The object guid as source anchor for migration scenarios are not considered very reliable as that might change with the migration resulting in other problem with syncing. Changing it to ms-DS-Consistency to make sure it remains immutable through out would be a good path to follow.

    One important point to mention here is :
    For any given on-premises AD User object whose ms-DS-ConsistencyGuid attribute isn't populated, Azure AD Connect writes its objectGUID value back to the ms-DS-ConsistencyGuid attribute in on-premises Active Directory. After the ms-DS-ConsistencyGuid attribute is populated, Azure AD Connect then exports the object to Azure AD

    Read more here

    =============================================================================

    If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

    0 comments
  2. VIGNESHWARAN M 1 Reputation point
    2020-12-09T15:39:51.267+00:00

    @VipulSparsh-MSFT Thanks for your response. So we need to change source anchor as "ms-DS-ConsistencyGuid" for both forests before migrating users? Can you please provide any articles regarding this topic, which might helpful for me. Once again thanks for your response.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.