Outlook Web App > For Exchange Online Administrators > Outlook Live for Live@edu > Implement Outlook Live Directory Sync for Live@edu >

Deploy Outlook Live Directory Sync for Live@edu

Applies to: Live@edu

Topic Last Modified: 2011-12-02

Important:
Outlook Live Directory Sync (OLSync) is the synchronization solution for Microsoft Live@edu customers. If you are running a cloud-based e-mail service with Microsoft Office 365 for enterprises, you must use the Microsoft Online Services Directory Synchronization tool to synchronize your directories.

Follow these steps to deploy and configure Outlook Live Directory Sync (OLSync). These steps explain how to deploy OLSync in a single on-premises Active Directory forest that connects to a single Outlook Live hosted tenant organization. If you need to connect multiple Active Directory forests to synchronize with Outlook Live, contact your Microsoft representative.

Before you begin

Be sure you understand what OLSync does, how it works, and what you need to deploy. Before you move forward, read Implement Outlook Live Directory Sync for Live@edu, OLSync Prerequisites for Live@edu, and Outlook Live Directory Sync for Live@edu Known Issues.

1. Deploy Outlook Live

Before you can deploy OLSync, you have to deploy your Outlook Live domain or domains.

For more information, see Outlook Live for Live@edu.

2. Prepare your on-premises organization

Now you need to install Microsoft Forefront Identity Manager (FIM) 2010 or Microsoft Identity Lifecycle Manager (ILM) 2007 and all dependencies in your on-premises organization.

You may also need to enable your Outlook Live domain as an additional UPN domain name in your on-premises provisioning domain.

Finally, we recommend that you test the OLSync deployment before you go into production. For testing purposes, create some on-premises test accounts to sync into Outlook Live.

For more information, see Prepare Your On-Premises Organization for OLSync for Live@edu.

3. Configure Outlook Live authentication for OLSync

OLSync requires access to your Outlook Live domain to create mail user, mailbox, and external contact objects. To authenticate with Outlook Live, you must create and use a Windows Live ID service account. For more information, see Create an OLSync Service Account in Outlook Live for Live@edu.

4. Create an on-premises OLSync service account

The on-premises OLSync service account is used by FIM 2010 or ILM 2007 to access the on-premises Active Directory Domain Services (AD DS) or Active Directory directory service. After you create the account, you need to grant it specific permission to initiate directory replication.

For more information, see Create an On-Premises OLSync Service Account for Live@edu.

5. Run OLSync setup

There are two versions of OLSync available: a 64-bit version to install with FIM 2010 and a 32-bit version to install with ILM 2007.

OLSync setup installs the Outlook Live Management Agent (OLMA) configuration and other files in the appropriate FIM 2010 or ILM 2007 directories. OLSync setup also imports the OLMA configuration and management agents.

For more information, see Run OLSync Setup for Live@edu.

6. Configure the OLSync Hosted management agent

The Hosted management agent manages the connection to Outlook Live.

For more information, see Configure the OLSync Hosted Management Agent for Live@edu.

7. Specify which on-premises organizational units you want to synchronize with Outlook Live (optional)

Before you synchronize all the accounts in the provisioning domain, we recommend that you test the OLSync synchronization by creating test accounts in a test organizational unit in your on-premises provisioning domain. In this way, you can verify that accounts are synchronized and provisioned as you planned.

For more information, see Specify the On-Premises Organizational Units that Are Synchronized to Outlook Live for Live@edu.

8. Install and configure PCNS (optional)

If you want to synchronize password changes in Active Directory to Outlook Live, you can install Password Change Notification Service (PCNS) and configure it to work with FIM 2010 or ILM 2007.

For more information, see Configure Password Change Notification Service (PCNS) for use with OLSync for Live@edu.

9. Perform a full data synchronization

To perform the first data synchronization with Outlook Live, you must run synchronization operations from FIM 2010 or ILM 2007 in a specific order that is unique to a full data synchronization.

For more information, see Perform a Full OLSync Synchronization to Outlook Live for Live@edu.

10. Verify that the on-premises accounts have been synchronized

After you've completed the OLSync configuration and initial synchronization, you need to verify that the synchronization was successful.

For more information, see Verify OLSync Synchronization to Outlook Live for Live@edu.

Implement Outlook Live Directory Sync for Live@edu