---
title: Azure AD – A new version of Azure AD Connect (1.6.2.4) is now available with new features - cubesys
description: As you know Azure Active Directory Connect (AAD Connect) is used to synchronize your on-premises Active Directory objects (users, groups, devices) to Azure AD with the option to synchronize the user’s hash password (aka password sync, aka password hash sync, aka PHS).Well, with this new version – 1.6.2.4 – available…
---

[Latest News & Blogs - cubesys ](https://www.cubesys.com.au/blog)

# [Azure AD – A new version of Azure AD Connect (1.6.2.4) is now available with new features - cubesys](https://www.cubesys.com.au/blog/azure-ad-a-new-version-of-azure-ad-connect-1-6-2-4-is-now-available-with-new-features)

 Written by [cubesys](https://www.cubesys.com.au/blog/author/cubesys) | Mar 21, 2021 1:00:00 PM

As you know Azure Active Directory Connect (AAD Connect) is used to synchronize your on-premises Active Directory objects (users, groups, devices) to Azure AD with the option to synchronize the user’s hash password (aka password sync, aka password hash sync, aka PHS).

Well, with this new version – 1.6.2.4 – available for download here [https://go.microsoft.com/fwlink/?LinkId=615771](https://go.microsoft.com/fwlink/?LinkId=615771) you can now configure **selective** PHS if you want to exclude some accounts from synchronizing the password hash to Azure AD.

To do so you will have to update an attribute (**adminDescription**) on your user’s Active Directory objects and edit the synchronization rules.

Depending of the number of user’s objects to exclude for the password hash synchronization, the process is a little bit different.

If the number of excluded user for PHS is **smaller** than the one included for PHS, then you will need to use the value **PHSFiltered**; otherwise (number of excluded users **larger** than the number of included users), then the value is **PHSIncluded**.

After having edited the **adminDescription** attribute with the value matching your requirement, you will have to **stop** the synchronization before editing the rule

> Set-ADSyncScheduler -SyncCycleEnabled $false

Then using the **Synchronization rules editor**, edit the rule **In from AD – User AccountEnabled** and make an editable copy as prompted when editing a built-in rule

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image-6-1.png>

Then **add a clause** from the **Scoping filter** section to match the below condition

- Attribute: **adminDescription**
- Operator: **equal**
- Value: either **PHSFiltered** or **PHSIncluded** depending of your context (see above)

<https://www.cubesys.com.au/hubfs/Imported_Blog_Media/image-7.png>

Then you can re enable the synchronization with the command

> Set-ADSyncScheduler -SyncCycleEnabled $true

And finally run a **full sync** with the command

> Start-ADSyncSyncCycle -PolicyType Initial

**NOTE** if the adminDescription attribute is **not** populated or does not have the correct value, then PHS will continue to work as before.

[View full post](https://www.cubesys.com.au/blog/azure-ad-a-new-version-of-azure-ad-connect-1-6-2-4-is-now-available-with-new-features)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "cubesys"
  },
  "dateModified" : "2025-02-21T15:35:33.766Z",
  "datePublished" : "2021-03-21T13:00:00Z",
  "headline" : "Azure AD – A new version of Azure AD Connect (1.6.2.4) is now available with new features",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cubesys.com.au/blog/azure-ad-a-new-version-of-azure-ad-connect-1-6-2-4-is-now-available-with-new-features",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Latest News"
  }
}
```