Outlook Web App > For Exchange Online Administrators > Outlook Live for Live@edu > Implement Outlook Live Directory Sync for Live@edu >

Deploy Outlook Live Directory Sync for Live@edu

Applies to: Live@edu

Topic last modified: 2011-12-02

Dd490636.important(en-GB,EXCHSRVCS.140).gifImportant:
Outlook Live Directory Sync (OLSync) is the synchronisation solution for Microsoft Live@edu customers. If you are running a cloud-based email service with Microsoft Office 365 for enterprises, you must use the Microsoft Online Services Directory Synchronisation tool to synchronise your directories.

Follow these steps to deploy and configure Outlook Live Directory Sync (OLSync). These steps explain how to deploy OLSync in a single on-premises Active Directory forest that connects to a single Outlook Live hosted tenant organisation. If you need to connect multiple Active Directory forests to synchronise with Outlook Live, contact your Microsoft representative.

Before you begin

Be sure you understand what OLSync does, how it works and what you need to deploy. Before you move forward, read Implement Outlook Live Directory Sync for Live@eduOLSync Prerequisites, and Outlook Live Directory Sync Known Issues.

1. Deploy Outlook Live

Before you can deploy OLSync, you have to deploy your Outlook Live domain or domains.

For more information, see Outlook Live for Live@edu.

2. Prepare your on-premises organisation

Now you need to install Microsoft Forefront Identity Manager (FIM) 2010 or Microsoft Identity Lifecycle Manager (ILM) 2007 and all dependencies in your on-premises organisation.

You may also need to enable your Outlook Live domain as an additional UPN domain name in your on-premises provisioning domain.

Finally, we recommend that you test the OLSync deployment before you go into production. For testing purposes, create some on-premises test accounts to sync into Outlook Live.

For more information, see Prepare Your On-Premises Organisation for OLSync.

3. Configure Outlook Live authentication for OLSync

OLSync requires access to your Outlook Live domain to create mail user, mailbox and external contact objects. To authenticate with Outlook Live, you must create and use a Windows Live ID service account. For more information, see Create an OLSync Service Account in Outlook Live.

4. Create an on-premises OLSync service account

The on-premises OLSync service account is used by FIM 2010 or ILM 2007 to access the on-premises Active Directory Domain Services (AD DS) or Active Directory directory service. After you create the account, you need to grant it specific permission to initiate directory replication.

For more information, see Create an On-Premises OLSync Service Account.

5. Run OLSync setup

There are two versions of OLSync available: a 64-bit version to install with FIM 2010 and a 32-bit version to install with ILM 2007.

OLSync setup installs the Outlook Live Management Agent (OLMA) configuration and other files in the appropriate FIM 2010 or ILM 2007 directories. OLSync setup also imports the OLMA configuration and management agents.

For more information, see Run OLSync Setup.

6. Configure the OLSync Hosted management agent

The Hosted management agent manages the connection to Outlook Live.

For more information, see Configure the OLSync Hosted Management Agent.

7. Specify which on-premises organisational units you want to synchronise with Outlook Live (optional)

Before you synchronise all the accounts in the provisioning domain, we recommend that you test the OLSync synchronisation by creating test accounts in a test organisational unit in your on-premises provisioning domain. In this way, you can verify that accounts are synchronised and provisioned as you planned.

For more information, see Specify the On-Premises Organisational Units that are Synchronised to Outlook Live.

8. Install and configure PCNS (optional)

If you want to synchronise password changes in Active Directory to Outlook Live, you can install Password Change Notification Service (PCNS) and configure it to work with FIM 2010 or ILM 2007.

For more information, see Configure Password Change Notification Service (PCNS) for use with OLSync for Live@edu.

9. Perform a full data synchronisation

To perform the first data synchronisation with Outlook Live, you must run synchronisation operations from FIM 2010 or ILM 2007 in a specific order that is unique to a full data synchronisation.

For more information, see Perform a Full OLSync Synchronisation to Outlook Live.

10. Verify that the on-premises accounts have been synchronised

After you've completed the OLSync configuration and initial synchronisation, you need to verify that the synchronisation was successful.

For more information, see Verify OLSync Synchronisation to Outlook Live.