MODIFIED docs/global-secure-access/how-to-configure-domain-controllers.md

Modified by Ken Withee on Jul 17, 2025 5:36 PM
📖 View on learn.microsoft.com

+11 / -11 lines changed

Commit: Fixes blocking and non-blocking issues.

Changes:

Before

After

ms.author: kenwith
manager: dougeby
ms.topic: how-to
ms.date: 07/14/2025
ms.service: global-secure-access
ms.subservice: entra-private-access
ms.reviewer: shkhalid
ai-usage: ai-assisted
---
# Configure Microsoft Entra Private Access for Active Directory Domain Controllers (preview)
 
This guide describes how to configure Microsoft Entra Private Access for Active Directory Domain Controllers (DCs). This capability helps strengthen secure access for on-premises users by enforcing conditional access/MFA to on-premises applications that use Kerberos authentication with the DCs.
 
1. You can configure the port in either a Quick Access or Enterprise Application.
1. Add the SPNs for the resources you want to secure. The system automatically delivers these SPNs to the Private Access Sensors installed on your domain controllers.
 
![Diagram showing Quick Access settings when configuring Microsoft Entra Private Access integration with Active Directory Domain Controllers](media/how-to-configure-domain-controllers/quick-access-settings.png)
 
### 3. Assign users and configure Conditional Access
 

ms.author: kenwith
manager: dougeby
ms.topic: how-to
ms.date: 07/17/2025
ms.service: global-secure-access
ms.subservice: entra-private-access
ms.reviewer: shkhalid
ai-usage: ai-assisted
---
# Configure Microsoft Entra Private Access for Active Directory domain controllers (preview)
 
This guide describes how to configure Microsoft Entra Private Access for Active Directory Domain Controllers (DCs). This capability helps strengthen secure access for on-premises users by enforcing conditional access/MFA to on-premises applications that use Kerberos authentication with the DCs.
 
1. You can configure the port in either a Quick Access or Enterprise Application.
1. Add the SPNs for the resources you want to secure. The system automatically delivers these SPNs to the Private Access Sensors installed on your domain controllers.
 
![Diagram showing Quick Access settings when configuring Microsoft Entra Private Access integration with Active Directory Domain Controllers.](media/how-to-configure-domain-controllers/quick-access-settings.png)
 
### 3. Assign users and configure Conditional Access
 

MODIFIED docs/identity/managed-identities-azure-resources/configure-managed-identities-isolation-scope.md

Modified by Sherman Ouko on Jul 17, 2025 10:31 AM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: More updates

Changes:

Before

After

 
- Read the [Isolation scope for user-assigned managed identities](managed-identities-isolation-scope.md) concept article to understand the benefits and implications.
 
## Enable regional isolation in Azure portal
 
To create a user-assigned managed identity with regional isolation scope:
 
1. Sign in to the [Azure portal](https://portal.azure.com)
 
    - **Subscription**: Select your subscription
    - **Resource Group**: Choose an existing resource group or create a new one
    - **Region**: Select the specific region for deployment
    - **Isolation Scope**: Select *Regional*
    - **Name**: Enter the name of the managed identity
 
1. Review and create. Select **Review + create** to validate your configuration.

 
- Read the [Isolation scope for user-assigned managed identities](managed-identities-isolation-scope.md) concept article to understand the benefits and implications.
 
## Configure isolation scope in Azure portal
 
Use the following steps to configure isolation scope for a user-assigned managed identity.
 
1. Sign in to the [Azure portal](https://portal.azure.com)
 
    - **Subscription**: Select your subscription
    - **Resource Group**: Choose an existing resource group or create a new one
    - **Region**: Select the specific region for deployment
    - **Isolation Scope**: Select *Regional* to set the isolation scope to regional or *None* to set it to none
    - **Name**: Enter the name of the managed identity
 
1. Review and create. Select **Review + create** to validate your configuration.

MODIFIED docs/identity/hybrid/accidental-deletes.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Configure accidental deletion prevention with Active Directory'
description: This article describes how you can configure accidental deletion prevention for the synchronization tools with Active Directory.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: conceptual
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid
ms.author: billmath
 
---
 

title: 'Configure accidental deletion prevention with Active Directory'
description: This article describes how you can configure accidental deletion prevention for the synchronization tools with Active Directory.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: conceptual
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/accounts.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Accounts for integrating with Active Directory'
description: This article describes the required accounts for each of the synchronization tools.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: conceptual
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid
ms.author: billmath
 
---
 

title: 'Accounts for integrating with Active Directory'
description: This article describes the required accounts for each of the synchronization tools.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: conceptual
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/concept-how-it-works.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Microsoft Entra Cloud Sync deep dive - how it works'
description: This topic provides deep dive information on how cloud sync works.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
---
 
# Cloud sync deep dive - how it works

title: 'Microsoft Entra Cloud Sync deep dive - how it works'
description: This topic provides deep dive information on how cloud sync works.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
---
 
# Cloud sync deep dive - how it works

MODIFIED docs/identity/hybrid/cloud-sync/custom-attribute-mapping.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Microsoft Entra Cloud Sync directory extensions and custom attribute mapping'
description: This article provides information on custom attribute mapping in cloud sync.
 
author: billmath
manager: femila
ms.service: entra-id
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
---
 
# Cloud sync directory extensions and custom attribute mapping

title: 'Microsoft Entra Cloud Sync directory extensions and custom attribute mapping'
description: This article provides information on custom attribute mapping in cloud sync.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
---
 
# Cloud sync directory extensions and custom attribute mapping

MODIFIED docs/identity/hybrid/cloud-sync/how-to-attribute-mapping-entra-to-active-directory.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Attribute mapping - Microsoft Entra ID to Active Directory'
description: This article describes how the attribute mapping and how to configure attributes when provisioning from Microsoft Entra ID to Active Directory.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'Attribute mapping - Microsoft Entra ID to Active Directory'
description: This article describes how the attribute mapping and how to configure attributes when provisioning from Microsoft Entra ID to Active Directory.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-attribute-mapping.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Attribute mapping in Microsoft Entra Cloud Sync'
description: This article describes how to use the cloud sync feature of Microsoft Entra Connect to map attributes.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'Attribute mapping in Microsoft Entra Cloud Sync'
description: This article describes how to use the cloud sync feature of Microsoft Entra Connect to map attributes.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-automatic-upgrade.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Microsoft Entra Connect cloud provisioning agent: Automatic upgrade'
description: This article describes the built-in automatic upgrade feature in the Microsoft Entra Connect cloud provisioning agent.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
 
---

title: 'Microsoft Entra Connect cloud provisioning agent: Automatic upgrade'
description: This article describes the built-in automatic upgrade feature in the Microsoft Entra Connect cloud provisioning agent.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
 
---

MODIFIED docs/identity/hybrid/cloud-sync/how-to-expression-builder.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Use the expression builder with Microsoft Entra Cloud Sync'
description: This article describes how to use the expression builder with cloud sync.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'Use the expression builder with Microsoft Entra Cloud Sync'
description: This article describes how to use the expression builder with cloud sync.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-gmsa-cmdlets.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Microsoft Entra provisioning Agent gMSA PowerShell cmdlets'
description: Learn how to use the Microsoft Entra provisioning agent gMSA PowerShell cmdlets.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'Microsoft Entra provisioning Agent gMSA PowerShell cmdlets'
description: Learn how to use the Microsoft Entra provisioning agent gMSA PowerShell cmdlets.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-inbound-synch-ms-graph.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'How to programmatically configure cloud sync using MS Graph API'
description: This topic describes how to enable inbound synchronization using just the Graph API
 
author: billmath
manager: femila
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
ms.service: entra-id
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'How to programmatically configure cloud sync using MS Graph API'
description: This topic describes how to enable inbound synchronization using just the Graph API
 
author: omondiatieno
manager: mwongerapk
ms.custom: has-azure-ad-ps-ref, azure-ad-ref-level-one-done
ms.service: entra-id
ms.topic: conceptual
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-install-pshell.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Install the Microsoft Entra Connect cloud provisioning agent using a command-line interface (CLI) and PowerShell'
description: Learn how to install the Microsoft Entra Connect cloud provisioning agent by using PowerShell cmdlets.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'Install the Microsoft Entra Connect cloud provisioning agent using a command-line interface (CLI) and PowerShell'
description: Learn how to install the Microsoft Entra Connect cloud provisioning agent by using PowerShell cmdlets.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

MODIFIED docs/identity/hybrid/cloud-sync/how-to-manage-registry-options.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'Microsoft Entra Connect cloud provisioning agent: Manage registry options'
description: This article describes how to manage registry options in the Microsoft Entra Connect cloud provisioning agent.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.reviewer: chmutali
ms.author: billmath
 
 
---

title: 'Microsoft Entra Connect cloud provisioning agent: Manage registry options'
description: This article describes how to manage registry options in the Microsoft Entra Connect cloud provisioning agent.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.tgt_pltfrm: na
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.reviewer: chmutali
ms.author: jomondi
 
 
---

MODIFIED docs/identity/hybrid/cloud-sync/how-to-on-demand-provision.md

Modified by omondiatieno on Jul 17, 2025 12:34 PM
📖 View on learn.microsoft.com

+3 / -3 lines changed

Commit: Update author and manager alias

Changes:

Before

After

title: 'On-demand provisioning in Microsoft Entra Cloud Sync'
description: This article describes how to use the cloud sync feature of Microsoft Entra Connect to test configuration changes.
 
author: billmath
manager: femila
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: billmath
 
---
 

title: 'On-demand provisioning in Microsoft Entra Cloud Sync'
description: This article describes how to use the cloud sync feature of Microsoft Entra Connect to test configuration changes.
 
author: omondiatieno
manager: mwongerapk
ms.service: entra-id
ms.topic: how-to
ms.date: 04/09/2025
ms.subservice: hybrid-cloud-sync
ms.author: jomondi
 
---
 

📋 Microsoft Entra Documentation Changes

📊 Summary

🆕 New Documentation Files

📝 Modified Documentation Files

🗑️ Deleted Documentation Files