Logo
| Product Documentation

AD Connect Sync

Active Directory Synchronization FAQ

  1. What is HC Active Directory Synchronization utility?
    HC Directory Synchronization (HCdirSync) is a tool used to synchronize customer local Active Directory objects with hosted cloud Active Directory. The purpose of this tool is to synchronize an external Active Directory with your hosted cloud based Active Directory. Large organizations that already have an Active Directory infrastructure and want to link their local Active Directory with their hosted Exchange Active Directory can use this tool.

  2. Is the synchronization process of ADSync two way?
    HCdirSync is a one way synchronization tool and enables the synchronization of local Active Directory users and groups to hosted cloud Active Directory. Reverse synchronization is not possible.

  3. What protocol does the HC ADSync utility use?
    HC ADSync tool uses LDAP protocol to manage and access the directory information service, and communicate with the host/cloud AD.

  4. What ports are used by HC ADSync tool?
    LDAP: 389
    LDAPS: 636
    Additional ports: 135, 139 and 445.

  5. Where do I install HCADSync utility?
    HC ADSync utility needs to be installed on the client's local Active Directory. It is not required to be deployed on the host/cloud AD.

  6. I have primary and additional DCs. Where should I deploy ADSync utility?
    HC ADSync utility comes with two installation modes, i.e. primary and secondary. If there are multiple DCs available then ADSync’s primary installation is required on the primary DC, while all the additional DCs will have the secondary installation of ADSync tool.

  7. Does it synchronize user passwords in Real-Time?
    Yes HC ADSync synchronizes user passwords within 10 seconds.

  8. Why existing passwords are not set for users who are already located in the Cloud DC ?
    When you create a new user in the Local AD then its password will also sync on the cloud, but for existing user which you map with cloud user you must change its password once on the local AD.

  9. Why user password is not syncing?
    If this happens after the recent installation of AD Sync tool then make sure you have rebooted the machine after configuring the Sync utility (this is mandatory to load HC ADSync password hook mechanism). Also try to provide complex password in case there is password complexity requirement on the Cloud DC.

  10. AD Sync is not enabling the disabled user on the cloud?
    If somehow user password has been set empty on the cloud DC then active directory will not allow to enable the user.

  11. Does HC AD Sync utility work using secure channel?
    Yes ADSync utility provides an option to use SSL layer for all communication between Local and Cloud DC. To use ADSync using SSL, make sure that LDAP-S is configured on the cloud AD, because ADSync utility will establish communication with the hosted AD. This means that the SSL (LDAP-S) configuration is to be done on cloud DC and not on the client DC.

    Also, inside “Cloud AD Settings” tab of AD Sync tool’s interface, provide the SSL enabled cloud domain name instead of an IP address.

  12. The ADSync utility is not syncing user attributes?
    Make sure that the domain/administrator credentials provided in “Cloud AD Settings” tab in HCdirSync’s interface have sufficient privileges to perform write operation on cloud AD. Moreover, ensure that the required ports are allowed through the firewall on cloud DC. Also make sure that “sAMAccountName” is included in the list of attributes to be synchronized. Without it, synchronization will fail. It is a mandatory attribute

  13. Can I choose few users from a specific Organization to be synced?
    HC ADSync gives the option to select required users, groups and contacts under the required OUs for sync purpose. It has the feature to map a specific client OU to a specific cloud OU.

  14. Can I select different Organization unit in the AD Sync utility?
    Yes you can add multiple Organization units in the utility to synchronize their objects with the Cloud DC.

  15. All of sudden ADSync shows license status in DEMO even after having valid License?
    When you open ADSync utility interface it loads information from System Registry and HC ADSync installation directory, so if you have connected the machine with user who have less privileges on the system then such problem could appears.Try to access the machine with domain\admin user and then see the License status.

  16. How does a user link with an existing cloud user?
    A user links with an existing cloud user making use of the userPrincipalName attribute. 

  17. How does a group link with an existing cloud group?
    A group links with an existing cloud group through sAMAccountName attribute.

  18. How does a mail contact link with an existing cloud contact?
    A mail contact links with an existing cloud contact making use of the Mail attribute.

  19. Which AD objects count towards the license limit?
    The license limit applies on the sum of synchronized Users, Groups and Contacts.

  20. Can a single local AD be synchronized with multiple cloud ADs?
    Yes a single local AD can be synchronized with multiple host/cloud ADs.

  21. Are changes to a user in a local AD, synchronized across all hosted/cloud ADs?
    In case of one-to-many synchronization, changes made to a user on the source AD are automatically synchronized across all target ADs.

  22. Which authentication protocol does LDAP use (Kerberos or NTLM)?
    HC ADSync LDAP implementation uses Windows Negotiate authentication (via System.DirectoryServices), meaning it does not explicitly enforce Kerberos or NTLM; instead, it automatically uses Kerberos by default when available and securely falls back to NTLM (or NTLMv2) when required by the environment.