規劃唯一的情況Planning for Unique Circumstances

規劃多個網域Planning for Multiple Domains

網域組態可能會大幅影響需要設定的所有學生與老師比對的身分識別的同步處理設定檔數目。通常,學必須要附加至其中一個要比對學生與老師從來源目錄的 O365/Azure AD 中的使用者物件的三個可用的來源目錄值的網域。同步處理設定檔中 SDS 可讓您使用 student identity 比對一個網域和網域老師 identity 比對。如果老師與學生的 Azure AD 有數種不同的網域目標 identity 比對屬性,特別是對於 UserPrincipalName 還是郵件屬性,您可能需要建立多個同步處理設定檔能夠有效率地符合您的使用者。如果您有使用 UserPrincipalName 還是郵件屬性中的單一網域老師與學生不同,您可以設定只有 identity 符合所有老師與學生的單一同步處理設定檔。Your domain configuration may greatly impact the number of sync profiles needed to configure identity matching for all students and teachers. Often, school districts will need to append a domain to one of the three available source directory values to match students and teachers from the source directory to the user object in O365/Azure AD. A sync profile in SDS allows you to use one domain for student identity matching and one domain for teacher identity matching. If your teachers and students in Azure AD have several different domains for the target identity matching attribute, specifically for the UserPrincipalName or Mail attribute, you may need to create multiple sync profiles to effectively match all your users. If you have a single domain in use for the UserPrincipalName or Mail attribute across your teachers and students, you may be able to configure only a single sync profile for identity matching all teachers and students.

建議Recommendations

O365/Azure AD 使用至少要有其網域尾碼值的網域特別搭配 UserPrincipalName 和郵件的屬性,以確保您比對的組態可能發生的單一同步處理設定檔內的識別數字或小型中設定您的使用者同步處理設定檔數目。請記住,當您同步處理設定檔數超過建議的三個,您可能會看到同步處理因本文稍早所討論的效能限制而延遲。您只可以設定每次同步處理設定檔、 一種學生與老師一種 2 網域。Configure your users in O365/Azure AD to use a minimum number of domains for their domain suffix value specifically with the UserPrincipalName and Mail attributes, to ensure your identity matching configuration can occur within a single sync profile, or small number of sync profiles. Remember, as your sync profile count exceeds the recommended three, you may see delays in sync processing due to performance limits discussed earlier in this article. You can only configure 2 domains per sync profile, one for students and one for teachers.

規劃大型學Planning for Large Districts

當啟用的大型或非常大型的學區同步處理] (100K + 使用者),您可能需要設定額外的同步處理設定檔來容納每個 CSV 檔案百萬個列數限制。中所述稍早本文中,如果您有 125,000 學生且每個學生 8 各節、 學生 enrollment.csv 會叫用百萬個列數限制。When enabling sync for large or very large districts (100K+ users), you may need to configure extra sync profiles to accommodate the one million row limit per CSV file. As stated earlier in this article, if you have 125,000 students, and each student has 8 sections each, your student enrollment.csv will hit the one million row limit.

建議Recommendations

  1. 計劃設定同步處理多個 100000 學生任何學,您應該規劃跨多個同步處理設定檔,以確保您未超過此限制的 CSV 檔案中的資料列分割您的使用者。請確認您的 CSV 檔案分割沿著學校行使一半的學生、 老師、] 區段中和您學校如名冊資料進入老師、] 區段中,第二個半時的第一個同步處理設定檔和名冊資料會移到第二個同步處理設定檔。所有學校關聯式資料應中相同都保持同步處理設定檔、 讓據此計劃 SIS/MIS 匯出。For any districts that plans to sync more than 100,000 students, you should plan to split your users across multiple sync profiles, to ensure you don’t exceed the limit for rows within a CSV file. Ensure that the split of CSV files is along school lines, so that half of the students, teachers, sections, and roster data for your schools goes into the first sync profile while the second half of teachers, sections, and roster data goes into the second sync profile. All school-based relational data should be maintained within the same sync profile, so plan your SIS/MIS export accordingly.
  2. 如果匯入 CSV 檔案,請考慮唯一命名慣例] 區段中,以確保每一節是獨特而識別使用者為其使用與這些章節的搜尋整個各種應用程式及服務。If importing CSV files, consider a unique naming convention for your sections, to ensure each section is unique and identifiable to your users as they work with and search for those sections across various applications and services.

適用於教育界 Intune 規劃Planning for Intune for Education

設定為 SDS 設定檔,您必須啟用整合 intune 適用於教育界的機會。將此核取方塊:When configuring an SDS profile, you will have the opportunity to enable integration with Intune for Education. This checkbox will:

  1. 建立所有學生與老師的所有群組Create All Students and All Teachers groups
  2. 建立 「 學生的每個學校"群組和"的每個學校老師"群組Create a “Students of each school” group and a “Teachers of each school” group
  3. 將授權指派給所有使用者設定檔Assign a license to all users within the profile

請確認您想要選取此核取方塊時啟用同步處理設定檔的所有 3 功能。Ensure you want all 3 features enabled for the sync profile when selecting this checkbox.

建議Recommendations

如果您在您的租用戶,可以套用至每個學生與老師正在同步處理該設定檔中的其中一個內有足夠的可用的教育授權 Intune 僅限核取此方塊。如果您沒有足夠的授權,您會收到錯誤的每個學生與老師無法設定已套用的授權。這些錯誤會租用隔離限制,所以據此計劃。此外,就可建立不同和專用的 Intune 教育同步處理設定檔與核取方塊。這不同的設定檔中未包含學生與老師。這會允許基本群組建立發生,但是會嘗試去之外的授權使用者必須提供、 為該處將沒有任何使用者 (或更少的使用者) 包含此同步處理設定檔。Only check this box if you have enough Intune for Education licenses available within your tenant, to be able to apply one to each student and teacher being synced within that profile. If you don’t have enough licenses, you will receive an error for each student and teacher that can’t have a license applied. These errors will count against your quarantine limit, so plan accordingly. Also, you may create a separate and dedicated Intune for Education sync profile with the box checked. In this separate profile, don’t include students and teachers. This will allow for the basic group creation to occur but will not attempt to license users beyond what you have available, as there will be no users (or fewer users) contained within this sync profile.