Wednesday, June 26, 2024
HomePowershellHow you can Improve Azure AD Join — LazyAdmin

How you can Improve Azure AD Join — LazyAdmin


Preserving your Azure AD Join consumer up-to-date is vital. Microsoft recurrently releases a brand new model, which fixes the most recent safety points and sometimes will increase shoppers’ efficiency and stability.

Updating the Microsoft Entra Join (previously referred to as Azure AD Join) will be executed mechanically. However in some circumstances, you will have or need to set up the most recent model manually.

On this article, we’re going to try the best way to do an in-place replace of the consumer to the most recent model and activate the automated updates.

Examine Azure AD Join Model

Step one is to verify the present model of your Azure AD Connection (AAD) consumer. There are a few methods to do that, however essentially the most handy method is to verify the construct quantity within the Azure AD Join Consumer, within the Apps & Options record, or utilizing PowerShell.

Azure Lively Listing Synchronization Service app

The most effective place to verify the model quantity is the Azure Lively Listing Synchronization Service app. This app is put in with the Azure AD Join consumer and will be discovered within the begin menu beneath Azure AD Join.

Open the app, and click on on Assist > About to view the model quantity.

Check Azure AD Connect Version

Apps & Options

You may also discover the put in model of the Azure AD Join consumer within the Apps & Options (former Applications and Options) record.

  • Proper-click on Begin (or open the management panel)
  • Open Apps and Options
  • Click on on Microsoft Azure AD Join and notice the model quantity
azure ad connect version

PowerShell

We will after all additionally use PowerShell to verify the model variety of Microsoft Entra Join. This methodology is very helpful if you wish to verify the model quantity remotely.

Run the command beneath to view the model quantity:

(Get-ADSyncGlobalSettings).parameters['Microsoft.Synchronize.ServerConfigurationVersion']

# Outcomes
Identify                   : Microsoft.Synchronize.ServerConfigurationVersion
InputType              : String
Scope                  : SynchronizationGlobal
Description            :
RegexValidationPattern :
DefaultValue           :
Worth                  : 2.3.6.0
Extensible             : False
PageNumber             : 0
Intrinsic              : False
DataType               : String

# Or use this command to return solely the quantity:
(Get-ADSyncGlobalSettings).parameters['Microsoft.Synchronize.ServerConfigurationVersion'].model

Improve Azure AD Join

Earlier than we are able to improve the Azure AD Join consumer, we have to make a backup of the configuration. Despite the fact that we’ll do an in-place improve, it’s all the time a good suggestion to export the configuration simply in case.

  1. Open the Azure AD Join consumer
  2. Click on on Configure
  3. Select View or Export Present configuration
  4. Click on on Export Settings and save the settings file

Obtain Azure AD Join

Obtain the newest model of Azure AD Join, now renamed to Microsoft Entra Join, from the Microsoft Obtain Heart. The MSI file is roughly 150 MB massive, so it shouldn’t take too lengthy to obtain.

Replace Azure AD Join

After the obtain is accomplished, open the MSI file to begin the set up of Microsoft Azure AD Join. Humorous element, the installer remains to be named Azure AD Join, although all of the documentation and Microsoft portals discuss with it as Microsft Entra Join. Nonetheless, it’s the identical utility.

The installer will acknowledge the earlier model and mechanically do an improve. The synchronization can be stopped throughout the improve. Click on on the inexperienced Improve button to begin the set up.

Be aware

A full sync can be executed when the improve is accomplished. However this will take just a few hours when you will have a big setting. Password sync will proceed for all objects, nevertheless it’s suggest to do the improve within the weekend for big environments.

The set up will first replace the synchronization engine. This takes a few minutes. When this step is accomplished, you will have to re-enter the Azure AD International administrator credentials.

Within the final step, configure, you will note which steps the improve will truly do. Make it possible for the verify the Begin the synchronization course of when configuration completes and click on on Improve

complete upgrade AAD connect

When the set up is accomplished, it’s a good suggestion to verify if the synchronization is up and operating once more. A fast approach to verify it’s within the Microsoft 365 Admin Heart and think about the Listing sync standing.

One other, higher, possibility is to verify the Synchronization Service Supervisor. This can present when the final sync has taken place and the outcomes. Yow will discover the Synchronization Service Supervisor within the begin menu, beneath Azure AD Join

verify synchronization status

Allow Auto Replace

The final step is to confirm that the auto-updating function of the Azure AD Join instrument is enabled. By default, it must be enabled, nevertheless it’s all the time a good suggestion to verify it.

To view the present standing, run the next PowerShell cmdlet on the server:

Get-AdSyncAutoUpgrade

To allow the auto improve function (or disable it if wanted), run the next PowerShell command:

# Allow auto improve of Azure AD Join
Set-AdSyncAutoUpgrade -AutoUpgradeState enabled

# Disable auto improve
Set-AdSyncAutoUpgrade -AutoUpgradeState disabled

Wrapping Up

Preserving your Azure AD Join consumer updated is vital to be sure to have the most recent security measures and enhancements. Additionally good to know, is that outdated variations are solely supported for 12 months after the discharge of a brand new model.

When you’ve got any questions, simply drop a remark beneath.

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

Recent Comments