Active Directory Sync

77 views
Skip to first unread message

Art Searle

unread,
May 10, 2012, 3:33:13 PM5/10/12
to k12ap...@googlegroups.com
Greetings,
Suppose users already exist in a Google Apps for Education environment via bulk upload. What would happen to those users, their accounts, and their data if an Active Directory Sync was performed with AD users having identical names? Can this work, or would the operation send the existing Google Apps users to a digital grave?
Thanks for your thoughts.
Art

melissa benson

unread,
May 10, 2012, 3:39:34 PM5/10/12
to k12ap...@googlegroups.com
It's my understanding that the accounts would be just fine and the passwords from AD would override any passwords that were there. It could change their name and profile info if it's different in the AD sync. But all of their data and stuff is untouched, it'd just say hey you already exist, nothing to do here.

Really, I think AD Sync is simply a comparison of the two and then a list of changes whcih then gets uploaded. So (I think) the AD sync really just creates a bulk upload file and uploads it...of course it's done automatically.

I'd wait until others reply before trying it :)

Steve Kellogg

unread,
May 10, 2012, 3:55:07 PM5/10/12
to melissa benson, k12ap...@googlegroups.com
That would be nice... I was afraid AD sync was going to delete anything in the Google apps domain that hadn't been provisioned from AD (even if the Google apps user name was identical to a name in AD).

Steve

--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en



--







melissa benson

unread,
May 10, 2012, 4:04:54 PM5/10/12
to k12ap...@googlegroups.com, melissa benson
Nope, pretty sure it does not care HOW the accounts got there, just that they're there. I doubt the sync would even be able to tell how they got there.

On a side note, I'd recommend setting up a "local" gapps org that does NOT sync with AD. We do that, put "reserve teachers" "student teachers" "testing" "detention". This way we can have local accounts that won't get messed with (or moved to their true grad year org in the case of our "detention" org). It's worked well for us.
Steve


For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en



--







Art Searle

unread,
May 10, 2012, 10:10:13 PM5/10/12
to k12ap...@googlegroups.com
That's the answer we were hoping for. Thanks for your feedback.
Art
Reply all
Reply to author
Forward
0 new messages