+ Post New Thread
Results 1 to 10 of 10
Cloud Services Thread, Office 365 - syncing certain OU's in Technical; Hi, I have started using the Azure connector with Office 365 which works pretty well (almost there M$... just copy ...
  1. #1

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50

    Office 365 - syncing certain OU's

    Hi,

    I have started using the Azure connector with Office 365 which works pretty well (almost there M$... just copy Google a bit more) but for some reason the syncing is doing all the Ou's to the cloud and I really don't want all my controlled assessment accounts up there.

    I have found an article which I think was for the previous version and changed the settings using the MIISCLIENT.EXE program in management agent > AD Connector > Configure Directory Partitions > Containers and just selected the staff OU to start with but its still syncing all the accounts and I am getting errors sent to m about the sync not working properly for these kids accounts.

    I went in and disabled the AD connector online and deleted all the kids accounts and tried again but they uploaded the kids accounts again.

    Is this the correct way to sync certain OU's? I have read somewhere that they want you to sync your whole org but that's a bit useless unless they start allowing us to create nice groups online to sort them out (Google again)

  2. #2


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,629
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    I used this as a starting point for filtering OUs. However, I filtered OUs **before** the initial sync.

    Office 365 DirSync Filtering « MSExchangeGuru.com

  3. #3

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    That's exactly how I followed my setup but its still syncing other OU's that I told it not to.

    If the account is not in the OU anymore that gets synced should it get put in the deleted users bit?

    The results of the upload are a bit confusing

    Synchronization Satitics
    Unchanged 165 (staff I believe)
    Add 0
    Updates 0
    Renames 0
    Deletes 1844

    Its just a bit confusing as I deleted everyone other than staff off the cloud last night and the first sync they have come back… but this is now saying its deleting them. I wonder if it took them out of deleted users and put them back in the main bit as the users are set for deleting after 30 days??

  4. #4
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    507
    Thank Post
    26
    Thanked 225 Times in 156 Posts
    Rep Power
    84
    Quote Originally Posted by Simcfc73 View Post
    (almost there M$... just copy Google a bit more)


    Quote Originally Posted by Simcfc73 View Post
    Is this the correct way to sync certain OU's? I have read somewhere that they want you to sync your whole org but that's a bit useless unless they start allowing us to create nice groups online to sort them out (Google again)
    Did you perform a full sync afterwards? Take a look at this post: Installing and Configure DirSync with OU level filtering for Office365 - Denotation - Site Home - MSDN Blogs

  5. #5

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    Quote Originally Posted by jamesbmarshall View Post
    Copying it the wrong word sorry, but you are playing catchup. It would be nice to be able to put the uploaded users into groups for easy filtering, only allowing 20 users per page is a pain as it took me ages to delete them yesterday.

    As for the DIRSYNC, I have doen a full sync and here is a screenie of my filtering. I must be missing something obvious here.

    azure.jpg
    Last edited by Simcfc73; 12th December 2013 at 10:25 AM.

  6. #6
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    507
    Thank Post
    26
    Thanked 225 Times in 156 Posts
    Rep Power
    84
    Quote Originally Posted by Simcfc73 View Post
    It would be nice to be able to put the uploaded users into groups for easy filtering, only allowing 20 users per page is a pain as it took me ages to delete them yesterday.
    The GUI is great for so, so many things. However, it's not particularly efficient for doing things for large numbers of users, or a large number of times in repetition. Windows Remote PowerShell is a much, much better method of managing more than a handful of users; offering you the ability to make far-reaching config changes in literally one or two lines of cmdlets.

    Google's approach might be more browser-based, and that's fine, but I don't think they have anything that even comes within a country mile of PowerShell.

    Quote Originally Posted by Simcfc73 View Post
    As for the DIRSYNC, I have doen a full sync and here is a screenie of my filtering. I must be missing something obvious here.

    azure.jpg
    You've got a couple of options. Start again by reinstalling DirSync. Phone support. Or lastly, get a partner to help you.

    How did you trigger a full sync?

  7. #7

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    It a new install on a different server, I had ADFS on a different one and it went belly up when I changed password so I reinstalled it fresh. I did a full sync with the right click run now, I will try with the powershell command next.

    I just added a attribute field now so will see if that works.

  8. #8

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    Boooo and as if by magic its done it and I don't know what I did wrong/right.

    Looking at the operations log the Windows Azure Active Directory export Export hadn't run since 8.30 even though I thought I was forcing it to which is weird.

    So my question is, when you right click on the AD connector and do a Full Import Full Sync is doesn't do a upload to the cloud, you have to do a right click Azure then Export.... is this right as its the way its forcing a sync on mine but there's no documentation saying this.

  9. #9
    jamesbmarshall's Avatar
    Join Date
    Feb 2010
    Location
    Reading, UK
    Posts
    507
    Thank Post
    26
    Thanked 225 Times in 156 Posts
    Rep Power
    84
    Quote Originally Posted by Simcfc73 View Post
    So my question is, when you right click on the AD connector and do a Full Import Full Sync is doesn't do a upload to the cloud, you have to do a right click Azure then Export.... is this right as its the way its forcing a sync on mine but there's no documentation saying this.
    No, you should not run them one by one like that. Use the PowerShell script.

    Synchronize your directories

  10. #10

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,817
    Thank Post
    24
    Thanked 91 Times in 71 Posts
    Rep Power
    50
    Okay thanks for the help, just going through and adding the attribute so it doesn't sync everyone.

    Don't mean to be overly negative and pro google.. I don't particularly like there stuff either it just some of there features are really good.. and I despair at having to use Powershell scripts to accomplish simple tasks, I have enough swimming in my head without having to remember strings of code.

SHARE:
+ Post New Thread

Similar Threads

  1. [Office 365] Syncing with SkyDrive Pro
    By randle in forum Cloud Services
    Replies: 2
    Last Post: 28th November 2013, 04:37 PM
  2. Office 365 Password sync issue
    By MrWu in forum Cloud Services
    Replies: 2
    Last Post: 14th November 2013, 06:30 PM
  3. PSA: DirSync & Password Sync now available for Office 365
    By jamesbmarshall in forum Cloud Services
    Replies: 31
    Last Post: 19th June 2013, 04:01 PM
  4. Replies: 3
    Last Post: 14th September 2011, 10:25 PM
  5. Script to shut down computers in a certain OU
    By tosca925 in forum Scripts
    Replies: 11
    Last Post: 25th September 2005, 09:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •