nerdexam
Microsoft

MS-102 · Question #286

Your network contains an Active Directory domain named adatum.com that is synced to a Microsoft Entra tenant. The domain contains 100 user accounts. The city attribute for all the users is set to…

The correct answer is A. From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets. To modify the city attribute for on-premises Active Directory users synced to Microsoft Entra ID, use PowerShell cmdlets on a domain controller.

Submitted by miguelv· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

Your network contains an Active Directory domain named adatum.com that is synced to a Microsoft Entra tenant. The domain contains 100 user accounts. The city attribute for all the users is set to the city where the user resides. You need to modify the value of the city attribute to the three-letter airport code of each city. What should you do?

Options

  • AFrom Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.
  • BFrom Azure Cloud Shell, run the Get-MgUser and Update-MgUser cmdlets.
  • CFrom the Microsoft Entra admin center, select all the Microsoft Entra users, and then use the
  • DFrom the Microsoft 365 admin center, select the users, and then use the Bulk actions option.

How the community answered

(43 responses)
  • A
    79% (34)
  • B
    12% (5)
  • C
    5% (2)
  • D
    5% (2)

Why each option

To modify the city attribute for on-premises Active Directory users synced to Microsoft Entra ID, use PowerShell cmdlets on a domain controller.

AFrom Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.Correct

Since the users are in an Active Directory domain synced to Microsoft Entra ID, changes to attributes like 'city' must be made in the on-premises Active Directory. The Get-ADUser and Set-ADUser cmdlets are the correct tools for bulk modifying user attributes in Active Directory, which will then sync to Microsoft Entra ID.

BFrom Azure Cloud Shell, run the Get-MgUser and Update-MgUser cmdlets.

Modifying Microsoft Entra ID user attributes directly using Graph API cmdlets (Get-MgUser, Update-MgUser) for a synced attribute will not work, as Microsoft Entra Connect would overwrite these changes from the on-premises source during the next sync cycle.

CFrom the Microsoft Entra admin center, select all the Microsoft Entra users, and then use the

The Microsoft Entra admin center does not provide a bulk edit option for arbitrary user attributes that originate from on-premises Active Directory.

DFrom the Microsoft 365 admin center, select the users, and then use the Bulk actions option.

The Microsoft 365 admin center also lacks a robust bulk edit feature for specific Active Directory attributes, especially those sourced from on-premises.

Concept tested: Managing synced on-premises Active Directory user attributes

Source: https://learn.microsoft.com/en-us/powershell/module/activedirectory/set-aduser?view=activedirectoryps-1.0

Topics

#Active Directory#Azure AD Connect#PowerShell#User Attribute Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice