Skip to main content
GoGuardian Admin can sync organizational units (OUs) directly from a Windows Active Directory (AD) server instead of Google Admin Console. This integration is designed for schools and districts that run Windows-only environments and do not use Google Admin Console to manage device or user OUs.

​
Understand When to Use Active Directory Sync

GoGuardian recommends Active Directory OU sync only for organizations that do not use Google Admin Console. If your school or district uses both Google Admin Console and Active Directory, continue using Google Admin Console as your OU source. To enable Active Directory OU sync, contact your GoGuardian account representative or support@goguardian.com.
GoGuardian supports only one OU provider at a time. Enabling Active Directory OU sync disables Google Admin Console and Clever as OU sources for your organization.

​
Understand How It Works

The integration uses a lightweight application (the GoGuardian AD Sync application) installed on your Active Directory Domain Controller. The application:
  1. Connects to GoGuardian using an access token generated in Org Management
  2. Pulls the OU structure from your AD server on a daily automatic schedule
  3. Syncs the selected OUs into GoGuardian so they can be assigned to filtering policies
You control which OUs are imported. Only OUs containing user accounts are required, but all OUs can be imported. Larger structures with many user accounts can take up to 10 minutes to complete a full sync.

​
Review Requirements

Before setting up Active Directory OU sync, confirm the following:
  • Windows Active Directory: Your organization uses Windows AD as the primary user and device directory (not Google Admin Console)
  • Domain Controller access: You have permission to install an application on the AD Domain Controller
  • .NET Framework 4.5 or later: Required for the AD Sync application to run
  • GoGuardian account access: A Super User account at manage.goguardian.com to generate the application token
  • Firewall access: GoGuardian IP addresses, ports, and domains are permitted through your firewall or proxy

​
Resources

Set Up Active Directory Sync

Install the AD Sync application and configure GoGuardian to use Active Directory as your OU source.

Troubleshoot Active Directory Sync

Diagnose and resolve sync failures, token errors, and application issues.
Last modified on July 13, 2026