SyncSE

Getting Started

Install and configure SyncSE to synchronize your Microsoft 365 GAL to user mailboxes.

This guide walks you through installing SyncSE and running your first synchronization.

Prerequisites

Before you begin, ensure you have:

  • A Windows Server (2019 or later) for hosting the SyncSE service
  • A Microsoft 365 tenant with Global Address List data
  • An Azure AD app registration with the required Graph API permissions
  • Administrative access to the target mailboxes

Step 1: Install the Service

Download the SyncSE installer and run it on your Windows Server. The installer will:

  1. Install the SyncSE Windows Service
  2. Create the configuration directory
  3. Register the service for automatic startup

Step 2: Configure Your Tenant

Register an Azure AD application with the following permissions:

  • Contacts.ReadWrite — to write personal contacts to target mailboxes
  • Directory.Read.All — to read GAL entries (users and contacts)
  • Group.Read.All — to resolve dynamic group membership (if using group targeting)

Add your tenant ID, client ID, and client secret to the SyncSE configuration file.

Step 3: Define Sync Rules

Configure which GAL entries to synchronize and to which mailboxes:

  • Source: Select a Dynamic Distribution Group, M365 Group, or the entire GAL
  • Target: Select a Dynamic Distribution Group, M365 Group, or specific mailboxes
  • Folder: Optionally specify a custom contact folder name

Step 4: Run Your First Sync

Start the SyncSE service. It will immediately begin synchronizing contacts based on your rules. Monitor the logs to verify everything is working correctly.

Next Steps