The problem.
Hybrid account lifecycle is tedious: create in AD, wait for sync, send credentials. OU mistakes break the flow into Entra ID.
What I built.
01
Management
- Users, security groups, distribution lists, contacts and mail-enabled groups, directly in synced OUs.
02
Bulk and security
- Create, disable, delete and move OU from an Excel file.
- Sign-in restricted to an admin group; credentials sent by e-mail (Microsoft Graph) or SMS.
The architecture.
Administratorauthorised group
Web consoleNode.js + PowerShell
Active Directorysynced OUs
Entra Connect
Entra ID
Security & guardrails.
- Access restricted to an admin group.
The results.
- A reliable account creation path, from AD to Entra ID.