---
id: 8528
title: "Should I Azure AD Sync/Entra Cloud Sync Domain Admins?"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/ensure-administrative-accounts-are-cloud-only/"
published_at: "2026-09-22T03:59:10Z"
tags: ["cloud", "cloud-security", "active-directory", "identity-security", "entra-id", "penetration-testing", "privilege-management", "azure-ad"]
phying_url: "https://phying.com/item/8528"
lang: en
---

# Should I Azure AD Sync/Entra Cloud Sync Domain Admins?

## Summary

Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2026-09-22T03:59:10Z
- **Original:** https://projectblack.io/blog/ensure-administrative-accounts-are-cloud-only/
- **Phying News:** https://phying.com/item/8528