2

Goal

Enable users to login to Office 365 using their Active Directory username and password.

Details

AD: One local domain (2012 R2) and one trusted (2003).

AD Connect: synchronises users from both domains but passwords are only synced from the local domain.

I've checked that in the trusted domain users are created as iNetOrgPerson not User type like in the local domain.

Is there a way to troubleshoot this somehow?

badboy
  • 81

1 Answers1

1

You are saying the objects ARE iNetOrgPerson objects? These are explicitly not supported for password sync and won't work. You need to convert them to user object.

You should be able to do this if you remote from 2008 R2 machine and use Powershell Set-ADUser <user> -Remove @{objectClass='inetOrgPerson'}

I'm not sure how you would do this directly on 2003, probably LDIFE but not completely sure there.

Jesus Shelby
  • 1,304