Configure Password Sync Agent
This is optional but recommended. Skip this article if you don't need users to sign in to Zoho services using their Active Directory credentials in near-real time.
Prerequisites: This requires the Identity Connect Agent to already be installed and configured (see Install the Identity Connect Agent and Configure Directory Sync). Critically, the LDAP account used for Identity Connect must have Domain Admin-level privileges for this step to work, i.e., read access alone (sufficient for base directory sync) is not enough.
How it works
The main Identity Connect Agent, when coupled with your Active Directory details, allows you to deploy multiple Password Sync Agents (one per Domain Controller) to instantly capture any password change made on these Domain Controllers and securely sync those changes to Zoho One.
Prerequisites for Password Sync Agent specifically
- Domain Admin-level LDAP account. The same account credentials provided during Identity Connect setup will be used for this installation.
- PowerShell remoting (WinRM) must be enabled on every Domain Controller where you plan to install the Password Sync Agent. You don't need to enable WinRM on Domain Controllers where the agent won't be installed. Learn how to enable WinRM
- SMB (Server Message Block) must be enabled on both the machine initiating the installation and the target Domain Controller, and ensure it is allowed through the firewall (SMB typically uses port 445). Learn how to detect and enable SMB
- The machine with the Identity Connect Agent must be bound to the Active Directory domain.
How installation works
The Zoho Directory Identity Connect agent transfers the Password Sync Agent installer file (ZohoDirectory_PasswordSynchronizer.msi) from the machine where the Zoho Directory Identity Connect Agent is installed to the selected Domain Controller over SMB. If SMB is disabled or blocked, the file transfer will fail and the installation cannot proceed. SMB is only required during this file transfer stage; once installation is complete, SMB is no longer required.
Steps to enable
- Enable the toggle to sync user passwords securely from Active Directory to Zoho One. (Domain Name is auto-filled based on the info entered during Identity Connect Agent installation.)
- Select the Domain Controllers where password sync is needed, and make sure all of them meet the exclusive requirements above.
- Select whether you want to auto-restart the Domain Controllers after installation. Regardless of your choice, the Password Sync Agent will only take effect after a Domain Controller restart.
If installation fails
If installation fails, the installer will only display "Installation failed." This is most commonly because one or more prerequisites are not met:
- The provided account doesn't have Domain Admin rights.
- WinRM is not enabled on the Domain Controller.
- The agent file could not be transferred to the Domain Controller because the SMB service is disabled on one of the machines or blocked by the firewall (port 445).
Fixing insufficient-privilege failures specifically
- Open the Identity Connect Agent (tray app) on the machine it's installed on.
- Update the directory credentials to an account with Domain Admin privileges.
- Save the changes and retry installing the Password Sync Agent from the Admin Panel.
- Updating the credentials does not require reinstalling the Identity Connect Agent. If installation continues to fail after verifying permissions, WinRM, and SMB availability, contact Zoho One Support for further assistance.
If a directory-synced user is deleted from Zoho One, password changes for that user in Active Directory will not sync unless the user is re-provisioned in Zoho One.
Once installed on multiple Domain Controllers, the Password Sync Agents work together under the same Identity Connect configuration, keeping all password updates in sync without extra manual steps.
Next: User Sync Settings and Lifecycle Behavior, or check status anytime in Monitoring and Troubleshooting.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Zoho FSM Video Tutorials
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Install the Identity Connect Agent
Prerequisites: Confirm your machine, account, and network meet the requirements in Prerequisites and Network Requirements before starting. One Experience UI Spaces UI One Experience UI Prerequisites: Confirm your machine, account, and network meet ...Integrate Your On-premises LDAP Directory with Zoho Directory Identity Connect
Roles required to perform this action Organization Admin Organization Owner Zoho Directory Identity Connect (ZDIC) is an on-premises agent that connects your organization’s on-premises LDAP-based directories to Zoho One. It automates synchronization ...Add CSV-As-A-Source to Zoho One using Identity Connect
Roles that can perform this action: Organization Owner, Organization Admin Subscription plans that support this feature: Free trial or any subscription Prerequisites: Before starting, make sure your machine, account, and network meet the requirements ...Configure Directory Sync
Prerequisites: The Identity Connect Agent must already be installed - See Install the Identity Connect Agent. This article covers choosing what to sync and mapping fields correctly. The steps to configure directory sync vary between the two User ...User Sync Settings and Lifecycle Behavior
Prerequisites: Directory sync must already be configured - See Configure Directory Sync. This article covers how to configure automated rules for user account handling based on changes in Active Directory, plus the scheduling and review steps that ...
New to Zoho LandingPage?
Zoho LandingPage Resources