Cloud Sync prerequisites
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit a9c6c08 · +5 −7 lines · also on GitHub
⋯ 2 unchanged lines
33
description: This article describes the prerequisites and hardware requirements you need for cloud sync.
44
55
ms.topic: how-to
6
−ms.date: 09/29/2025
6
+ms.date: 07/27/2026
77
ms.subservice: hybrid-cloud-sync
88
---
99
⋯ 9 unchanged lines
1919
2020
- A Hybrid Identity Administrator account for your Microsoft Entra tenant that isn't a guest user.
2121
22
−- Microsoft Entra Cloud Sync agent must be installed on a domain-joined server that runs Windows Server 2022, Windows Server 2019, or Windows Server 2016. We recommend Windows Server 2022. You can deploy Microsoft Entra Cloud Sync on Windows Server 2016, but since it's in extended support, you might need [a paid support program](/lifecycle/policies/fixed#extended-support) if you require support for this configuration. Installing on unsupported versions of Windows Server may cause service failures or unexpected behavior.
22
+- Microsoft Entra Cloud Sync agent must be installed on a domain-joined server. We recommend using Windows Server 2025 or Windows Server 2022. You can also deploy Microsoft Entra Cloud Sync on older Windows Server versions that are in extended support; however, support for this configuration may require [a paid support program](/lifecycle/policies/fixed#extended-support).
2323
2424
2525
> [!IMPORTANT]
26
− > **Windows Server 2025 is NOT supported.**
27
− > There is a known issue on Windows Server 2025 that can cause Microsoft Entra Cloud Sync to encounter synchronization problems. If you upgraded to Windows Server 2025, make sure you have installed [October 20, 2025 - KB5070773](https://support.microsoft.com/topic/october-20-2025-kb5070773-os-build-26100-6901-out-of-band-f8effaa1-1c73-41e5-bcb3-e58a46c7601e) update, or later. After installing this update, restart the server for the changes to take effect.
28
− > Windows Server 2025 support for Microsoft Entra Cloud Sync is planned for a future release.
26
+ > There is a known issue on Windows Server 2025 that can cause Microsoft Entra Cloud Sync to encounter synchronization problems. If you're running Windows Server 2025, make sure you have installed [October 20, 2025 - KB5070773](https://support.microsoft.com/topic/october-20-2025-kb5070773-os-build-26100-6901-out-of-band-f8effaa1-1c73-41e5-bcb3-e58a46c7601e) update, or later. After installing this update, restart the server for the changes to take effect.
2927
3028
3129
- This server should be a tier 0 server based on the [Active Directory administrative tier model](/security/privileged-access-workstations/privileged-access-access-model). Installing the agent on a domain controller is supported. For more information, see [Harden your Microsoft Entra provisioning agent server](#harden-your-microsoft-entra-provisioning-agent-server)
⋯ 30 unchanged lines
6260
- The Active Directory schema in the gMSA domain's forest needs to be updated to Windows Server 2012 or later.
6361
- [PowerShell RSAT modules](/windows-server/remote/remote-server-administration-tools) on a domain controller.
6462
- At least one domain controller in the domain must be running Windows Server 2012 or later.
65
−- A domain-joined server that runs Windows Server 2022, Windows Server 2019, or Windows Server 2016 for the agent installation.
63
+- A domain-joined server that runs Windows Server 2025 or Windows Server 2022 for the agent installation.
6664
6765
### Custom gMSA account
6866
⋯ 25 unchanged lines
9492
9593
## In your on-premises environment
9694
97
−1. Identify a domain-joined host server that runs Windows Server 2022, Windows Server 2019, or Windows Server 2016 with a minimum of 4-GB RAM and .NET 4.7.1+ runtime.
95
+1. Identify a domain-joined host server that runs Windows Server 2025 or Windows Server 2022 with a minimum of 4-GB RAM and .NET 4.7.1+ runtime.
9896
2. The PowerShell execution policy on the local server must be set to Undefined or RemoteSigned.
9997
3. If there's a firewall between your servers and Microsoft Entra ID, see [Firewall and proxy requirements](#firewall-and-proxy-requirements).
10098
⋯ 121 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:59 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.