Azure – Remove certain AD Sync from Azure AD Sync

active-directoryazureconnectormicrosoft-office-365

I installed Azure AD Connector, followed the directions for an express install. When the sync occurred, everything was sync to include Service Accounts. All I want is active users that are in certain OU's. How do I remove what was synced and sync what I need? We have been using O365 for some time and the online account was updated (which was ok). I was reading this post https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnectsync-configure-filtering/ but it came back with a Stopped Deletion Threashold. Did not want to proceed if it was going to delete everything fom O365.

Any help or suggestions?

Best Answer

Re-run the Setup wizard, and select custom, and you can select which OU's to sync. Or

  1. open the Synchronization Service Manager
  2. Select Connectors
  3. Double click the Active Directory Domain Services Connector to open it's properties.
  4. Select Configure Directory Partitions
  5. Select the Containers button
  6. Use an account with access to the directory tree (the AD OU tree) - it doesn't get saved here so don't worry about that
  7. Click OK

Once you do that you will get a view of the domain OU's, you can then select or de-select the OU's you want to sync.

Please understand that objects that are no longer synced will be removed from Office 365. You have 30 days to sync them back and not lose anything.

enter image description here

Related Topic