The AD Sync service enables customers to synchronize their own localized domain controller to the hosted domain controller. The customer's organizational unit (OU) in the hosted domain controller is regularly updated with any user changes that have been saved in the customer's domain controller. All hosted services that are provisioned to the users are configured directly to the user objects that are saved in the hosted domain controller.
The AD Sync service is a customer-only service. Once provisioned to a customer, the customer's administrator has access to download and configure the AD Sync tool to their existing domain controller. To download the tool, the customer must be configured with the Allow passwords to Never Expire option set to Yes. If this option is set to No, errors are recorded in the customer's event log and no users appear in CloudPortal Services Manager.