Azure Entra ID Groups written back (Distribution group & Mail Enabled Security group)

AhmedKareem 0

Dear Community

We are currently using AD Connect to sync on-prem resources to Cloud

we also want to implement group writeback from Azure AD to on-Prem AD, so we can use the Microsoft 365 groups (Security groups, Mail Enabled Distribution groups, Distributuion Groups).

Currently using Extra ID - Entra connect (AD Sync latest version)

I want to know is there any limitation in group write back.?

Givary-MSFT 33,476 Reputation points Microsoft Employee

2024-11-21T10:56:41.3+00:00

@AhmedKareem Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

2 answers

akinbade abiola 18,725 Reputation points

2024-11-17T16:23:52.83+00:00

The public preview of Group Writeback v2 in Microsoft Entra Connect Sync will no longer be available after June 30, 2024.

Would recommend you use cloud sync for writeback. See limitations here:
https://learn.microsoft.com/en-us/entra/identity/hybrid/group-writeback-cloud-sync

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.
AhmedKareem 0 Reputation points

2024-11-17T16:38:03.28+00:00

Hi Abiola,

Thanks for your answer,

See limitations here: https://learn.microsoft.com/en-us/entra/identity/hybrid/group-writeback-cloud-sync

it means it's support only security group? not distribution groups?

You mean to say if i enabled the Group write back feature on Azure AD Connect (Application) I won't be able to sync the Azure AD group to On-prem AD?

i would like to know if we used Cloud sync is it possible to Sync (Security groups, Mail Enabled Distribution groups, Distributuion Groups). on-prem AD?

Thanks,
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Thameur-BOURBITA 33,406 Reputation points

2024-11-17T19:52:50.73+00:00

Hi @AhmedKareem

As mentioned in the link below only security group are supported by group write back feature.

Any other group type is not supported.

Supported groups and scale limits

I recommend you to switch to Cloud sync instead of EntraConnect server if your want use the group write back feature since this feature in EntraConnect server is no longer supported by Microsoft

Provision Microsoft Entra ID to Active Directory - Configuration

Please don't forget to accept helpful answer
Please sign in to rate this answer.
AhmedKareem 0 Reputation points

2024-11-17T20:57:51.6633333+00:00

@Thameur-BOURBITA & @akinbade abiola

Thank you for your reply,

I'm bit confused,

if we use Cloud sync possible to Sync the (Security groups, Mail Enabled Distribution groups, Distributuion Groups). on-prem AD?

As per the above link - Entra Connect server is no longer supported by Microsoft and Connect server not supported Mail Enabled Distribution groups, Distributuion Groups except Security groups.

please let me know if above statement is correct?

Thameur-BOURBITA 33,406 Reputation points

2024-11-17T21:16:26.63+00:00

Hi @AhmedKareem

Unfortunately ,even you use Cloud sync you the group write back feature is enabled only for security group:

Please don't forget to accept helpful answer

Raja Pothuraju 8,265 Reputation points Microsoft Vendor

2024-11-18T10:26:25.8666667+00:00

Hello @AhmedKareem,

Thank you for posting your query on Microsoft Q&A.

The above responses have been validated, and it is confirmed that there is a known limitation with Group Writeback settings and configurations: only cloud-created security groups are supported even if we move to Cloud sync.

I would recommend requesting this on the Microsoft Feedback Portal. This is a great way to let them know how important this feature is for your organization. You can provide details about how it would benefit your use case and any other relevant information as Engineers constantly check there for features.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Thanks,
Raja Pothuraju.

Thameur-BOURBITA 33,406 Reputation points

2024-11-19T23:13:19.5+00:00

Hi @Raja Pothuraju

I think your answer is for @AhmedKareem :)

Raja Pothuraju 8,265 Reputation points Microsoft Vendor

2024-11-20T01:52:18.7933333+00:00

@Thameur-BOURBITA,

Yes, Thanks for the mention. I made changes now.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Entra ID Groups written back (Distribution group & Mail Enabled Security group)

2 answers

Your answer