选择用于 Azure AD Connect 的安装类型Select which installation type to use for Azure AD Connect

Azure AD Connect 为全新安装提供两种安装类型:快速安装和自定义安装。Azure AD Connect has two installation types for new installation: Express and customized. 本主题有助于用户确定安装过程中使用的具体选项。This topic helps you to decide which option to use during installation.

ExpressExpress

“快速”安装是最常用的选项,在所有全新安装中,大约 90% 会使用此选项。Express is the most common option and is used by about 90% of all new installations. 快速安装旨在提供适合最常用客户方案的配置。It was designed to provide a configuration that works for the most common customer scenarios.

此安装假设:It assumes:

  • 用户在本地使用单个 Active Directory 林。You have a single Active Directory forest on-premises.
  • 用户具有安装时能够使用的企业管理员帐户。You have an enterprise administrator account you can use for the installation.
  • 用户在本地 Active Directory 中的对象不到 100,000 个。You have less than 100,000 objects in your on-premises Active Directory.

用户可以获得:You get:

仍可使用“快速”选项的场合:Options where you can still use Express:

  • 如果不想要同步所有 OU,仍可使用“快速”选项。请在最后一页上取消选择“启动同步过程...”*。If you do not want to synchronize all OUs, you can still use Express and on the last page, unselect **Start the synchronization process...***. 然后再次运行安装向导,更改配置选项中的 OU 并启用计划同步。Then run the installation wizard again and change the OUs in configuration options and enable scheduled sync.

“自定义”Custom

与“快速”安装相比,自定义的路径允许更多选项。The customized path allows many more options than express. 此安装适用于上述针对“快速”安装的配置对组织来说不具代表性的所有情况。It should be used in all cases where the configuration described in previous section for express is not representative for your organization.

使用时机:Use when:

  • 无法访问 Active Directory 中的企业管理员帐户。You do not have access to an enterprise admin account in Active Directory.
  • 有多个林,或者计划在将来同步多个林。You have more than one forest or you plan to synchronize more than one forest in the future.
  • 林中的域无法从 Connect 服务器访问。You have domains in your forest not reachable from the Connect server.
  • 你计划使用联合进行用户登录。You plan to use federation for user sign-in.
  • 有 100,000 多个对象,需使用整个 SQL Server。You have more than 100,000 objects and need to use a full SQL Server.
  • 计划使用基于组的筛选,而不是只基于域或 OU 的筛选。You plan to use group-based filtering and not only domain or OU-based filtering.

从 DirSync 升级Upgrade from DirSync

如果当前正在使用 DirSync,请遵循从 DirSync 升级中的步骤升级现有配置。If you are currently using DirSync, then follow the steps in Upgrade from DirSync to upgrade your existing configuration. 有两个不同的升级选项:There are two different upgrade options:

  • 就地升级,用于在同一服务器上安装 Connect。In-place upgrade to install Connect on the same server.
  • 并行部署,用于在新服务器上安装 Connect,此时现有的 DirSync 服务器仍可正常运行。Parallel deployment to install Connect on a new server while the existing DirSync server is still operational.

从 Azure AD Sync 升级Upgrade from Azure AD Sync

如果当前正在使用 Azure AD Sync,可以遵循从一个 Connect 版本升级到更新版本时采用的相同步骤If you are currently using Azure AD Sync, then you can follow the same steps as when you upgrade from one Connect version to a newer. 有两个不同的升级选项:There are two different upgrade options:

  • 就地升级,用于在同一服务器上安装 Connect。In-place upgrade to install Connect on the same server.
  • 交叉迁移,用于在新服务器上安装 Connect,此时现有的 Azure AD Sync 服务器仍可正常运行。Swing-migration to install Connect on a new server while the existing Azure AD Sync server is still operational.

从 FIM2010 或 MIM2016 迁移Migrate from FIM2010 or MIM2016

如果目前是在将 Forefront Identity Manager 2010 或 Microsoft Identity Manager 2016 与 Azure AD 连接器结合使用,则唯一选项是迁移。If you are currently using Forefront Identity Manager 2010 or Microsoft Identity Manager 2016 with the Azure AD Connector, then your only option is a migration. 请遵循交叉迁移中所述的步骤。Follow the steps described in swing-migration. 执行这些步骤时,请将出现的所有 Azure AD Sync 替换为 FIM2010/MIM2016。In the steps, replace any mention of Azure AD Sync with FIM2010/MIM2016.

后续步骤Next steps

根据已选定使用的选项,使用左侧的目录查找包含详细步骤的文章。Depending on the option you have selected to use, use the table of content to the left to find your article with the detailed steps.