Microsoft Entra ID
FundamentalsAdsync Service Account
In brief
The table now explicitly labels Group Managed Service Account (gMSA) and Standalone Managed Service Account (sMSA), with corresponding installation guidance.
What Entra admins need to know
Administrators can more clearly identify the service account type and the applicable guidance when configuring or reviewing Microsoft Entra Connect.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Type of account | Installation option | Description |
|---|---|---|
| Virtual Service Account | Express and custom, 2017 April and later | A Virtual Service Account is used for all express installations, except for installations on a Domain Controller. When using custom installation, it's the default option unless another option is used. |
| Group Managed Service Account (gMSA) | Custom, 2017 April and later | If you use a remote SQL Server, then we recommend using a group |
| Standalone Managed Service Account (sMSA) | Express and custom, 2021 March and later | A standalone Managed Service Account prefixed with ADSyncMSA_ is created during installation for express installations when installed on a Domain Controller. When using custom installation, it's the default option unless another option is used. |
| User Account | Express and custom, 2017 April to 2021 March | A User Account prefixed with AAD_ is created during installation for express installations when installed on a Domain Controller. When using custom installation, it's the default option unless another option is used. |
| User Account | Express and custom, 2017 March and earlier | A User Account prefixed with AAD_ is created during installation for express installations. When using custom installation, another account can be specified. |
@@ -19,8 +19,8 @@ The sync service can run under different accounts. It can run under a Virtual Se |Type of account|Installation option|Description| |-----|------|-----| |Virtual Service Account|Express and custom, 2017 April and later| A Virtual Service Account is used for all express installations, except for installations on a Domain Controller. When using custom installation, it's the default option unless another option is used.| -|Managed Service Account|Custom, 2017 April and later|If you use a remote SQL Server, then we recommend using a group managed service account. |-|Managed Service Account|Express and custom, 2021 March and later|A standalone Managed Service Account prefixed with ADSyncMSA_ is created during installation for express installations when installed on a Domain Controller. When using custom installation, it's the default option unless another option is used.|+|Group Managed Service Account (gMSA)|Custom, 2017 April and later|If you use a remote SQL Server, then we recommend using a group Managed Service Account. |+|Standalone Managed Service Account (sMSA)|Express and custom, 2021 March and later|A standalone Managed Service Account prefixed with ADSyncMSA_ is created during installation for express installations when installed on a Domain Controller. When using custom installation, it's the default option unless another option is used.| |User Account|Express and custom, 2017 April to 2021 March|A User Account prefixed with AAD_ is created during installation for express installations when installed on a Domain Controller. When using custom installation, it's the default option unless another option is used.| |User Account|Express and custom, 2017 March and earlier|A User Account prefixed with AAD_ is created during installation for express installations. When using custom installation, another account can be specified.|