Which employees can authenticate by using Azure AD? What should you do to remove the warning for pass-through authentication?

Written by John Gruber Published on Last Updated on

Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD) as shown in the following exhibit.

AD Connect Setup

The synchronization schedule is configured as shown in the following exhibit.

AD Connect Scheduler status

Which employees can authenticate by using Azure AD?

What should you do to remove the warning for pass-through authentication?

Click to show answer

Users that have an Azure AD user account or a synced on-premises account can both authenticate. (Pass-through authentication does not affect cloud-only accounts)

The yellow exclamation mark is Microsoft warning you that you should have at least 2 pass-through authentication agents (in case one server fails).

There's also an issue with the synchronization server because the last sync time is 4 hours. A sync should run every 30 minutes.

https://www.gitbit.org/course/ms-500/learn/Whats-AD-Connect-ky5W0Lz5P

< Previous Next > Skip Exam >>