Home / server / Questions / 972892
Accepted
Norrin Rad
Asked: 2019-06-26 16:58:11 +0800 CST

Azure AD password writeback policy

  • 772

This might be a silly question but when a user resets their password on azure ad, how does it make sure the password is compliant with the onpremise Group Policy which specifies number of characters etc. We have no ad controllers in azure and will use azure ad for all authentication

Thanks and sorry if I’m being a bit dense.

azure

1 Answers

  1. Best Answer

    When you synchronize your on premises AD to Azure AD, your on premises password policy becomes your Azure AD password policy. So any password change from the cloud must comply with your on premises password policy because the on premises password policy is your Azure AD password policy.

    Note that if you are using password hash synchronization and unless you have password writeback enabled (which requires an Azure AD Premium subscription) the on premises password will overwrite the cloud password on the next password hash sync from the on premises directory.

    • 1