View directory synchronization status in Microsoft 365

If you have integrated your on-premises Active Directory Domain Services (AD DS) with Microsoft Entra ID by synchronizing your on-premises environment with Microsoft 365, you can also check the status of your synchronization.

View directory synchronization status

  • Sign in to the Microsoft 365 admin center and choose DirSync Status on the home page.
  • Alternately, you can go to Users > Active users, and on the Active users page, select the Ellipse > Directory synchronization. On the Directory Synchronization pane, choose Go to DirSync management.

Note

If you haven't already set up directory synchronization for your tenant, you will be redirected to the Add or sync users to Microsoft Entra ID advanced deployment guide. Follow the steps in the guide to add cloud users, set up one-time or continuous sync, or find troubleshooting information.

Information on the Manage directory synchronization page

The following table lists the features you can get information about on the page.

If there's a problem with your directory synchronization, the errors are listed on this page as well. For more information about different errors you might encounter, see Identify directory synchronization errors in Microsoft 365.

Item What it's for
Domains verified Number of domains in your Microsoft 365 tenant that you have verified you own.
Domains not verified Domains you have added, but not verified.
Directory sync enabled True or False. Specifies whether you have enabled directory sync.
Latest directory sync Last time directory sync ran. Will display a warning and a link to a troubleshooting tool if the last sync was more than three days ago.
Password sync enabled True or False. Specifies whether you have password hash sync between our on-premises and your Microsoft 365 tenant.
Last Password Sync Last time password hash sync ran. Will display a warning and a link to a troubleshooting tool if the last sync was more than three days ago.
Directory sync client version Contains a download link if a new version of Microsoft Entra Connect has been released.
Directory sync service account Displays the name of your Microsoft 365 directory sync service account.

Monitor synchronization health

In this section, you'll install a Microsoft Entra Connect Health agent on each of your on-premises AD DS domain controllers to monitor your identity infrastructure and the synchronization services provided by Microsoft Entra Connect. The monitoring information is made available in a Microsoft Entra Connect Health portal, where you can view alerts, performance monitoring, usage analytics, and other information.

The key design decision of how to use Microsoft Entra Connect Health is based on how you're using Microsoft Entra Connect:

When complete, you’ll have:

  • The Microsoft Entra Connect Health agent installed on your on-premises identity provider servers.
  • The Microsoft Entra Connect Health portal displaying the current state of your on-premises infrastructure and synchronization activities with the Microsoft Entra tenant for your Microsoft 365 subscription.