Lesson 5/11
Microsoft Entra Connect settings & Password Hash Sync (PHS)Azure AD Connect and Microsoft Entra ID. Find out how to migrate from PTA to PHS, enable Password Hash Sync and configure password writeback. A complete demonstration with hybrid Active Directory synchronisation and certificate management.
☰
Contents
23
▾
0:03 An overview of Azure AD Connect 0:15 Understanding Password Hash Sync 0:31 Connecting to the ADSync server 0:54 Privacy and telemetry settings 1:20 Exporting and backing up the configuration 1:36 Checking the Microsoft Entra certificate 2:05 Rotating the Azure AD Connect certificate 2:40 Changing the synchronisation options 3:17 Adding new Active Directory objects 3:33 Microsoft Entra hybrid join 4:03 Staging mode and production mode 4:15 Migrating from PTA to PHS 4:47 Uninstalling the PTA agent 5:03 Checking the Azure AD synchronisation 5:33 Testing sign-in with Active Directory down 6:00 Checking the app registration certificate 6:44 PHS authentication with no AD server 7:53 The limits of changing a password 8:30 Enabling password writeback 9:24 Changing the synchronised UPN 10:14 Testing a password reset 10:43 SSPR licensing limits in Microsoft Entra 11:12 Recap of the PTA to PHS migration
