Introduction
Over time, the number of free tools provided by Microsoft for synchronizing (and sometimes syncing back) on-premises AD and Azure AD has increased up to 3 (not to mention Azure Active Directory Connector for FIM 2010 R2):
- Directory Sync aka DirSync
- Azure AD Sync aka AADSync
- Azure AD Connect aka AADConnect
While the first is apparently set for retirement and the two others would ultimately merge, it is still valuable to have a good idea of their capabilities and constraints before making the right choice for each implementation.
I will later publish the upgrade paths from DirSync to AADConnect.
Tool Comparison
The table hereunder is attempt to compare them as comprehensively as possible. Please note that 95% of credit for this comparison table go to French Directory Service MVP Maxime Rastello. Here is his original French article: DirSync vs Azure AD Sync vs Azure AD Connect : lequel choisir ?
Note: I will try to keep this table as up to date as possible at the following location: Office 365: MS Directory Synchronization Tool Comparison.
Tools | Directory Sync (DirSync) |
Azure AD Sync (AADSync) |
Azure AD Connect (AADConnect) |
---|---|---|---|
Capabilities | |||
General | |||
Latest Version Download | 1.0.7020.0000 (07/31/2014) |
1.0.0494.0501 (05/02/2015) |
1.0.628.2 Public Preview 2 (03/20/2015) |
Version History | TechNet Wiki Article | MSDN Article | Not Currently Officially Available |
Multi-Domain Sync | Yes | Yes | Yes |
Multi-Forest Sync | No | Yes | Yes |
Filtering by OU | Yes | Yes | Yes |
Filtering by Attributes | Yes | Yes | Yes |
Customizable Attribute Set | Yes But Not Supported | Yes | Yes |
Customizable Sync Rules | Yes | Yes | Yes |
Sync On-Premises to Cloud | |||
Users | Yes | Yes | Yes |
Contacts | Yes | Yes | Yes |
Security Group | Yes | Yes | Yes |
Distribution Group | Yes | Yes | Yes |
Password | Yes | Yes | Yes |
Extended Attributes | No | No | Yes (Requires Azure AD Premium) |
Devices | No | No | Yes (Requires Azure AD Premium) |
Sync Cloud to On-Premises | |||
Users | No | No | Yes (Requires Azure AD Premium) |
Contacts | No | No | Future Release |
Security Group | No | No | Future Release |
Distribution Group | No | No | Future Release |
Password (Write-back) | No | Yes (Requires Azure AD Premium) |
Yes (Requires Azure AD Premium) |
Office 365 Group | No | No | Yes (Requires Azure AD Premium) |
Devices | No | No | Yes (Requires Azure AD Premium) |
Interoperability | |||
Office 365 UPN Selection | Yes But Not Supported | Yes | Yes |
Hybrid Exchange Migration Support | Yes But Single-Forest Only | Yes But Single-Forest Only | Yes |
3rd Party LDAP Server Support | No | No | Future Release |
Assistance to ADFS Set-up | No | No | Yes |
Manageability | |||
PowerShell Cmdlets | Yes | Yes | Yes |
Staging Mode | No | No | Yes |
Requirements | |||
Hosting Server Operating System | Windows Server 2008 64-bit with SP1 or later Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 |
Windows Server 2008 64-bit with SP1 or later Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 |
Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 |
Hosting Server .Net Framework | v3.5 Service Pack 1 v4.5.1 |
v4.5.1 | v4.5.1 |
Hosting Server Domain Membership | Member Server Domain Controller (Same Forest) |
Workgroup Member Server Domain Controller |
Member Server Domain Controller (Same Forest) |
AD Functional Level | Windows Server 2003 or Higher | Windows Server 2003 or Higher | Windows Server 2003 or Higher |
Domain Controller Operating System | Windows Server 2003 with SP1 Windows Server 2008 64-bit with SP1 or later Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 |
Windows Server 2003 with SP1 Windows Server 2008 64-bit with SP1 or later Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 |
Windows Server 2008 R2 with SP1 or later Windows Server 2012 Windows Server 2012 R2 Note: SSO with AD FS option requires Windows Server 2012 or higher |
Additional Information’s
- Ryan Sizemore’s Blog [MSFT]: AADConnect, AADSync, and DirSync. Oh, my
- Maxime Rastello’s Blog [French MVP]: DirSync vs Azure AD Sync vs Azure AD Connect : lequel choisir ?