In my previous post I described that Microsoft have released a preview of the next generation of directory synchronisation in the form of Azure Active Directory Synchronization Services, or AAD Sync for short. The official announcement, via the Active Directory Team Blog, also included some other exciting news!
Preview Self Service Password Reset writeback to Windows Server AD using DirSync
A preview of DirSync password writeback for Self Service Password Reset has been added to Azure Active Directory. This preview capability allows customers who rely on federation or password hash sync to use Azure AD Premium to reset on-premises passwords in Windows Server Active Directory.
The preview requires a new version of the Directory Synchronization tool, a.k.a. DirSync which, as stated in the official announcement, can be downloaded from this link. Once installed the DirSync PowerShell cmdlet Enable-OnlinePasswordWriteback is used to configure the feature. Documentation is/will be here.
What about AADSync? Will that support write-back? Not in the current preview is the answer to that question.