Upgrade Password Sync

Do the following on each of your Active Directory servers (domain controllers):

1. Sign in to the domain controller as a domain administrator. The account must be from the domain controller’s domain.
2. Download Password Sync. Ensure you download the correct edition for your operating system (32-bit or 64-bit).
3. Run the downloaded installer.
4. Complete the installer steps.
5. Click Yes to restart your system.
6. (Optional) To verify the upgrade completed correctly:
   1. On the domain controller, click Control PanelPrograms and Features.
   2. Find Password Sync in the list and confirm the info in the Version column is correct.

1. Sign in to the domain controller as a domain administrator. The account must be from the domain controller’s domain.
2. Download Password Sync. Ensure you download the correct edition for your operating system (32-bit or 64-bit).
3. Copy the Password Sync software to your domain controller.
4. To begin the upgrade using the previous configuration file, use the following command:

   msiexec /i passwordsync_[32|64]bit.msi /l*vx msi_log.txt /quiet

   Note: This is a single command without line breaks.

5. Restart your system.
6. (Optional) To verify the upgrade completed correctly:
   1. On the domain controller, click Control PanelPrograms and Features.
   2. Find Password Sync in the list and confirm the info in the Version column is correct.

If you need to modify your configuration while upgrading, you can set new arguments and parameters.

Note: Make sure you're a Google Workspace super administrator for your Google Workspace organization. Only super administrators can authorize the service account required to complete a Password Sync upgrade this way.

1. Sign in to the domain controller as a domain administrator. The account must be from the domain controller’s domain.
2. Download Password Sync. Ensure you download the correct edition for your operating system (32-bit or 64-bit).
3. Copy the Password Sync software to your domain controller.
4. To begin the upgrade with the updated configuration file, build the command using the command prompt on your domain controller.

   Start with the following command and append the arguments and parameters specified in the table below. Enter the arguments with all uppercase letters and enclose the parameters in quotation marks

   msiexec /i passwordsync_[32|64]bit.msi /l*vx msi_log.txt /quiet

   Note: The final version should be a single command without line breaks.

   Argument	Parameter
   ADMIN_EMAIL	The email address of your Google administrator. Example: ADMIN_EMAIL="[email protected]"
   BASE_DN	(Optional) Your Active Directory domain's base distinguished name (DN). When this parameter is omitted, Password Sync attempts to autodetect the base DN. Example: BASE_DN="OU=users,DC=mydomain,DC=com".
   CREDENTIALS_FILE	The full path to your service account JSON file. Note: The JSON file has a key that allows access to your Google domain. After authentication, remove the file from the system. Example: CREDENTIALS_FILE="c:\users\administrator\downloads\service_account.json"
   MAIL_ATTRIBUTE	(Optional) The Active Directory attribute that has each user's Google email address. When this parameter is omitted, Password Sync uses the default "mail" attribute. Example: MAIL_ATTRIBUTE="mail"

5. Restart your system.
6. (Optional) To verify the upgrade completed correctly:
   1. On the domain controller, click Control PanelPrograms and Features.
   2. Find Password Sync in the list and confirm the info in the Version column is correct.

Password Sync upgrade example

_{Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.}