AD Connect Sync Plus Password Filter is a password hook for capturing password changes in real-time and storing them securely within the DC to be fetched and used later by the sync service. It is installed on the DC machine.