G Suite Password Sync (GSPS) automatically keeps your users' passwords in sync with their Microsoft Active Directory passwords. Whenever a user's Active Directory password is changed, GSPS immediately pushes the change to their managed Google Account.
Important: GSPS never changes Active Directory passwords; it only syncs Active Directory password changes to your organization's Google Account.
GSPS is available to G Suite and Cloud Identity administrators.
Before you begin
GSPS system requirementsIf you have the legacy free edition of G Suite, upgrade to G Suite Basic to get this feature.
To use GSPS, you'll need:
- Microsoft Windows Server 2008, 2012, 2016 or later. Windows Server Core installations are supported, but they require installation and configuration from the command line. Learn more
- Microsoft Active Directory DS. Active Directory Lightweight Directory Services (AD LDS) is not supported.
Note: Domain controllers must also run supported versions of Windows Server. Active Directory Schema Version or functional levels are unimportant, provided the Windows Server version is supported.
GSPS must be installed on all domain controllers. Ensure the domain controllers have access to the correct URLs and ports:
- Complete step 1 in Set up a G Suite host name whitelist.
- Complete the Top-level URLs section of step 2.
- Complete steps 3 and 4.
Download GSPS
Download the correct MSI for your server's architecture:
Restart the server
Always restart the server after installing or upgrading GSPS.
Next
See step-by-step instructions on how to Set up G Suite Password Sync.
Google, G Suite, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.