By default, after running the WindowsAzureActiveDirectorySynctool ConfigurationWizard, the entire ActiveDirectoryforest is scoped for synchronization, including all userobjects, all groupobjects, and all mailenabledcontactobjects. Passwords will not be synchronized unless the EnablePasswordSynccheckbox is selected