> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Understand Active Directory OU Sync

> How GoGuardian's Active Directory integration syncs organizational units from a Windows AD server to replace the default Google Admin Console OU source.

GoGuardian Admin can sync organizational units (OUs) directly from a Windows Active Directory (AD) server instead of Google Admin Console. This integration is designed for schools and districts that run Windows-only environments and do not use Google Admin Console to manage device or user OUs.

## Understand When to Use Active Directory Sync

GoGuardian recommends Active Directory OU sync only for organizations that do **not** use Google Admin Console. If your school or district uses both Google Admin Console and Active Directory, continue using Google Admin Console as your OU source.

To enable Active Directory OU sync, contact your GoGuardian account representative or [support@goguardian.com](mailto:support@goguardian.com).

<Note>
  GoGuardian supports only one OU provider at a time. Enabling Active Directory OU sync disables Google Admin Console and Clever as OU sources for your organization.
</Note>

## Understand How It Works

The integration uses a lightweight application (the GoGuardian AD Sync application) installed on your Active Directory Domain Controller. The application:

1. Connects to GoGuardian using an access token generated in Org Management
2. Pulls the OU structure from your AD server on a daily automatic schedule
3. Syncs the selected OUs into GoGuardian so they can be assigned to filtering policies

You control which OUs are imported. Only OUs containing user accounts are required, but all OUs can be imported. Larger structures with many user accounts can take up to 10 minutes to complete a full sync.

## Review Requirements

Before setting up Active Directory OU sync, confirm the following:

* **Windows Active Directory**: Your organization uses Windows AD as the primary user and device directory (not Google Admin Console)
* **Domain Controller access**: You have permission to install an application on the AD Domain Controller
* **.NET Framework 4.5 or later**: Required for the AD Sync application to run
* **GoGuardian account access**: A Super User account at [manage.goguardian.com](https://manage.goguardian.com/) to generate the application token
* **Firewall access**: GoGuardian IP addresses, ports, and domains are permitted through your firewall or proxy

## Resources

<CardGroup cols={2}>
  <Card title="Set Up Active Directory Sync" href="/products/org-management/setup-active-directory">
    Install the AD Sync application and configure GoGuardian to use Active Directory as your OU source.
  </Card>

  <Card title="Troubleshoot Active Directory Sync" href="/products/org-management/troubleshoot-active-directory-sync">
    Diagnose and resolve sync failures, token errors, and application issues.
  </Card>
</CardGroup>