It’s time for a new version of Azure AD Connect to incorporate Microsoft’s lessons learned and distribute the fixes Microsoft made to the larger public. Last Friday, Microsoft released the third version in the 1.4 branch of Azure AD Connect: v18.104.22.168.
Azure AD Connect is Microsoft’s free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments and LDAP v3-compatible directories to Azure Active Directory.
Fixed Azure AD-joined device synchronization
This version fixes an issue with existing Hybrid Azure AD-joined devices.
Release 22.214.171.124 contains a new device sync rule that corrects this issue.
This rule change may cause deletion of obsolete devices from Azure AD. This is not a cause for concern, as these device objects are not used by Azure AD during Conditional Access authorization. For some customers, the number of devices that will be deleted through this rule change can exceed the deletion threshold. If you see the deletion of device objects in Azure AD exceeding the Export Deletion Threshold, it is advised to allow the deletions to go through. How to allow deletes to flow when they exceed the deletion threshold.
Schema change requiring MSOnline Module 126.96.36.199, or up
Versions 1.4.x of Azure AD Connect add several URLs to the AdditionalWSFedEndpoint property of the ‘Microsoft Office 365 Identity Platform’ relying party trust between your AD FS Farm and Azure AD. Due to an internal schema change in version 188.8.131.52 of Azure AD Connect, if you manage this relying party trust’z relationship configuration settings in AD FS through Azure AD Connect using the MSOnline PowerShell, then you must update to version 184.108.40.206 of the MSOnline PowerShell module, or to a newer version when it becomes available.
This is version 220.127.116.11 of Azure AD Connect.
This release in the 1.4 branch for Azure AD Connect was made available for download on November 8, 2019.
You can download Azure AD Connect here.
The download weighs 91.0 MB.
After the upgrade to Azure AD Connect version 18.104.22.168 completes, a full Synchronization cycle is automatically triggered, followed by a full import for the Azure AD connector and a full sync for the AD connector. Since this may take some time, depending on the number of objects in scope of your Azure AD Connect environment and the connectivity to both Active Directory and Azure AD, make sure that you have taken the necessary steps to support this or hold off on upgrading until you have found a convenient moment to do so.