規劃 SDS 中的特殊情況Planning for Special Situations in SDS

規劃多個網域Planning for Multiple Domains

您的網域設定可能會極大影響設定所有學生和教師身分識別的所需同步處理設定檔數目。Your domain configuration may greatly impact the number of sync profiles needed to configure identity matching for all students and teachers. 學校地區必須將網域新增至三個可用來原始目錄值之一,以將來原始目錄中的學生和教師與 O365/Azure AD 中的 user 物件進行比對。Often, school districts will need to append a domain to one of the three available source directory values to match students and teachers from the source directory to the user object in O365/Azure AD. SDS 中的同步處理設定檔可讓您將一個網域用於學生身分識別比對的一個網域,以供教師身分識別的相符。A sync profile in SDS allows you to use one domain for student identity matching and one domain for teacher identity matching. 如果您在 Azure AD 中的老師和學生針對目標 identity match 屬性有數個不同的網域,特別是針對 UserPrincipalName 或 Mail 屬性,您可能需要建立多個同步處理設定檔,才能有效地符合您的所有使用者。If your teachers and students in Azure AD have several different domains for the target identity matching attribute, specifically for the UserPrincipalName or Mail attribute, you may need to create multiple sync profiles to effectively match all your users. 如果您有單一網域用於 UserPrincipalName 或所有的教師和學生的郵件屬性,則您可以只設定單一同步處理設定檔的身分識別,使其符合所有教師和學生的身分識別。If you have a single domain in use for the UserPrincipalName or Mail attribute across your teachers and students, you may be able to configure only a single sync profile for identity matching all teachers and students.

建議Recommendations

在 O365/Azure AD 中將使用者設定為使用最少的網域數目的網域尾碼值,以使用 UserPrincipalName 和郵件屬性,以確保您的身分識別設定可在單一同步處理設定檔或少量的 sync 設定檔內進行。Configure your users in O365/Azure AD to use a minimum number of domains for their domain suffix value specifically with the UserPrincipalName and Mail attributes, to ensure your identity matching configuration can occur within a single sync profile, or small number of sync profiles. 請記住,當您的同步處理設定檔計數超過建議的三個值時,您可能會看到同步處理的延遲,因為本文稍早所述的效能限制。Remember, as your sync profile count exceeds the recommended three, you may see delays in sync processing due to performance limits discussed earlier in this article. 您只能為每個同步處理設定檔設定2個網域,一個用於學生,另一個適用于教師。You can only configure 2 domains per sync profile, one for students and one for teachers.

規劃大型地區Planning for Large Districts

為大型或大型大型地區(100K + 使用者)啟用同步處理時,您可能需要設定額外的同步處理設定檔,以容納每個 CSV 檔案的2000000列限制。When enabling sync for large or very large districts (100K+ users), you may need to configure extra sync profiles to accommodate the two million row limit per CSV file. 如本文稍早所述,如果您有250000名學生,且每個學生都有8個區段,則您的學生註冊 .csv 會命中2000000列限制。As stated earlier in this article, if you have 250,000 students, and each student has 8 sections each, your student enrollment.csv will hit the two million row limit.

建議Recommendations

  1. 針對計畫同步處理200000以上學生的任何地區,您應該規劃將使用者分割在多個同步處理設定檔中,以確保您不會超過 CSV 檔案中列的限制。For any districts that plans to sync more than 200,000 students, you should plan to split your users across multiple sync profiles, to ensure you don’t exceed the limit for rows within a CSV file. 請確定分割 CSV 檔的方式是沿學校行,這樣,您的學校的一半學生、教師、區段和名單資料會進入第一個同步處理設定檔,而第二一半的教師、區段和名單資料會進入第二個同步處理設定檔。Ensure that the split of CSV files is along school lines, so that half of the students, teachers, sections, and roster data for your schools goes into the first sync profile while the second half of teachers, sections, and roster data goes into the second sync profile. 所有 school 的關係資料都應該在相同的同步處理設定檔內進行維護,因此請規劃 SIS/MIS 以進行相應的匯出。All school-based relational data should be maintained within the same sync profile, so plan your SIS/MIS export accordingly.
  2. 若要匯入 CSV 檔案,請考慮區段的唯一命名慣例,以確保每個區段都是唯一的且可辨識的使用者,並在不同的應用程式和服務中搜尋這些區段。If importing CSV files, consider a unique naming convention for your sections, to ensure each section is unique and identifiable to your users as they work with and search for those sections across various applications and services.

規劃 Intune 教育版Planning for Intune for Education

設定 SDS 設定檔時,您將有機會啟用與 Intune 教育版的整合。When configuring an SDS profile, you will have the opportunity to enable integration with Intune for Education. 此核取方塊將會:This checkbox will:

  1. 建立所有學生和所有教師群組Create All Students and All Teachers groups
  2. 建立「每個學校的學生」群組和「每個學校的教師」群組。Create a “Students of each school” group and a “Teachers of each school” group
  3. 將授權指派給設定檔內的所有使用者Assign a license to all users within the profile

選取此核取方塊時,請確定您想要啟用同步處理設定檔的所有3種功能。Ensure you want all 3 features enabled for the sync profile when selecting this checkbox.

建議Recommendations

只有在您的租使用者中有足夠的 Intune 供教育授權使用,且能夠對該設定檔內同步處理的每位學生和教師套用一個,才能勾選此方塊。Only check this box if you have enough Intune for Education licenses available within your tenant, to be able to apply one to each student and teacher being synced within that profile. 如果您沒有足夠的授權,您將會收到未套用授權之每個學生和教師的錯誤。If you don’t have enough licenses, you will receive an error for each student and teacher that can’t have a license applied. 這些錯誤會因您的資料處理限制而計數,因此請據此規劃。These errors will count against your limit for processing data, so plan accordingly. 此外,您也可以建立個別和專用的 Intune 用於教育同步處理設定檔,並選取 [盒] 方塊。Also, you may create a separate and dedicated Intune for Education sync profile with the box checked. 在這個個別的設定檔中,請勿包含學生和教師。In this separate profile, don’t include students and teachers. 這將允許建立基本群組,但不會嘗試授權使用者,因為此同步設定檔內包含沒有的使用者(或較少的使用者)。This will allow for the basic group creation to occur but will not attempt to license users beyond what you have available, as there will be no users (or fewer users) contained within this sync profile.