PSA: DirSync & Password Sync now available for Office 365

[plexer]

You can scope by AD OU

 

Just be careful... if you move a user who was sync'd into an OU that's not sync'd then that will cause the Office 365 object to get deleted.

 

Just to clarify though does it only sync from AD to Azure i.e if I delete a user in the Office 365 admin portal it won't delete the AD account? and if I scope it to sync on one OU for testing it will create a new user account for any ad account created within that OU but it's not going to go and delete all my Office 365 users as they don't exist in that OU?

 

Ta

 

Ben

[Simcfc73]

I hate to pull out LMBTFY, but here goes!

 

Let me Bing that for you!

 

Configuring the management agent is a simple, but potentially dangerous process. It goes without saying: don't be tempted to fiddle with your production environment otherwise you could end up deleting users by accident or altering the way the MA works into non-supportable state!

 

When you move an object into an OU that isn't synchronised by DirSync it will process the object as a deletion in Azure AD meaning you could lose data.

 

Hope that helps!

 

Does MS support an official way to scope OUs? The stuff on Bing is not for Azure and is a bit confusing. The management agents are named differently and I can't work out how to scope individual OU's.

[plexer]

This one? User soft-delete and Dirsync filtering enabled - Microsoft Education in the Cloud - Site Home - TechNet Blogs

 

Ben

[jamesbmarshall]

This one?

 

Isn't that the first result in the search?

[plexer]

Don't know is it? don't use bing lol

 

Ben

[Simcfc73]

ah sorry, the paths are wrong in the article and the management agents names dont tally. Will this delete the users online that have already been synced with a full sync if I target a OU?

[Simcfc73]

Woohoo, got it syncing with just the staff OU now, it deleted all the pupils accounts that got created in the first sync and put them in the deleted users bit so be careful. Might have a play with some attributes filtering now.

 

PS. The Azure sync is different from the article, the OU's are selected int he container tab at the bottom, after you connect to the AD with your credentials a window opens allowing you to select which OU you want to sync.