[Office 365] dirsync and changed username

[Cache]

Afternoon all

 

Having got into the swing of thigns with Office 365, I've now hit a stumbling block.

 

I've had to rename 2 users in Active Directory which has all gone fine and dandy, dirsync has picked up the new email address, new display name and everything except the new username.

 

Is there something I'm doing wrong in order to rename the user in Office 365 or can anyone point me in the powershell direction in order to be able to change it?

 

Thanks

[jamesbmarshall]

Have you set their UPN in AD to be their new username?

[Cache]

Hi James

 

Yes, I've altered everything from, for example joe.bloggs to james.bloggs in both the samaccountname and the UPN field.

[the_dude]

I think this is what you may need: Set-MsolUserPrincipalName -newuserprincipalname [email protected] -userprincipalname [email protected]

 

this is run in remote ps btw

Edited September 10, 2013 by the_dude
remote ps

[AngryTechnician]

@the_dude is correct, I had to do the same thing recently with a user who has changed their name. DirSync can't seem to manage it, and for some reason Microsoft don't let you rename AD-synced accounts in the web GUI, but it works in remote PowerShell.

 

If you've not used remote PowerShell before there are some setup steps. Here's the official reference on TechNet: Manage Windows Azure AD using Windows PowerShell

[Cache]

Thanks both, I've managed to get that sorted now.

 

It does seem odd considering DirSync can manage everything else without a hitch.

 

The only thing I've spotted is I can't alter the onmicrosoft.com domain now to reflect the change as I still redirect from our old webmail up their just in case but I'll work around that somehow. (Well I can get the new one on there, but can't remove the old one).

 

Cheers again both!

[jamesbmarshall]

The only thing I've spotted is I can't alter the onmicrosoft.com domain now to reflect the change as I still redirect from our old webmail up their just in case but I'll work around that somehow.

 

Do you mean changing it from something.onmicrosoft.com to somethingelse.onmicrosoft.com? If so, then I can save you some time, because unfortunately once it's set when you first sign up, it's set for life. The only way to change it would be to start again from scratch in a new environment.

 

Of course, you can add your own custom domains in as you need them but the .onmicrosoft.com bit (aka the MODRD, or MOERA) can't be altered.

[Cache]

Do you mean changing it from something.onmicrosoft.com to somethingelse.onmicrosoft.com? If so, then I can save you some time, because unfortunately once it's set when you first sign up, it's set for life. The only way to change it would be to start again from scratch in a new environment.

 

Of course, you can add your own custom domains in as you need them but the .onmicrosoft.com bit (aka the MODRD, or MOERA) can't be altered.

 

No, I'm quite happy with the actual onmicrosoft.com domain we've got (fits in perfectly with the school domain).

 

When creating the user, dirsync gave it a [email protected], renaming it put it out of sync so it was [email protected] and still had [email protected]. I've now got it to have [email protected], [email protected] and [email protected]

 

Sorry, I've probably not explained it all very well. Because it's dirsync'd I can't remove the [email protected].

Edited September 11, 2013 by Cache

[andybarker27]

new to dirsync so any help will be really appreciated. installed it on a server 2008r2 member. ran through the setup all was successful. right at the end it said sync so I did. I have since been on our office 365 portal and it has uploaded all accounts within AD all to the .onmicrosoft

how do I manually pick which groups or users i want to sync? is there also anyway of setting the properdomain name as default instead of the onmicrosoft.com

[Cache]

I followed this guide for the OU level filtering and it worked perfectly: Installing and Configure DirSync with OU level filtering for Office365 - Denotation - Site Home - MSDN Blogs

 

In regards to the onmicrosoft domain. For your already synced users, you will need to either bulk edit the users through the Office 365 Portal or run the Powershell command above with some sort of scripting to do all your users.

 

If you want DirSync to set any new users up with your domain name automatically, you will need to configure it as an additional UPN within your Active Directory. (I haven't done this, I'm still on the manual activate and alter UPN stage in the portal and is working quite well so far, touch wood!)

[andybarker27]

Cache thanks for your reply. Just tried doing it and I think Dirsync has been updated since they wrote the MSDN page.

I can see the section where you would click select "Containers" once I click this another box pops up with the forest name of my internal network and a username of MSOL_3546fdcccb8c which is the username Dirsync uses to contact my office 365 account. But I now cannot do anything else as I do not know this password

any ideas now

[Cache]

No your right, it confused me at first. Delete the msol account name and enter the administrator account details for your domain and then you can filter on the ou.

[andybarker27]

cheers as soon as I posted I though shall I do that. so I did and clicked on container I just wanted. As the whole forest was ticked before I presume it will remove these users from Office 365 as they are no longer sync.

[Cache]

Yes, when the sync next occurs all those users will move to the recycle bin (can't remember whether it's called the recycle bin or not but you get what I mean)

[andybarker27]

I forced sync - or well I think I have. says complete but all users still on office 365

[EduTech]

Hi,

 

Is this still not working? once the users have been filtered out in DirSync (FIM) then upon the next sync task it will move the user objects to the 'Deleted Users' Group. They will reside in here for 30 days and then be permanently removed.

 

Let me know if you are still having difficulty.

 

James.

[andybarker27]

just checked my office365 portal and it says sync was less than 2 hrs ago, but all the original users are still there. I edited it last night about 10pm to stop the entire forest to just one OU container with about 6 users in there. dirsync server still says sync complted when I do a full sync

go to be something simple

[EduTech]

Have you double checked the configuration to ensure that all of the stops mentioned in the following article have been completed: User soft-delete and Dirsync filtering enabled - Microsoft Education in the Cloud - Site Home - TechNet Blogs / Installing and Configure DirSync with OU level filtering for Office365 - Denotation - Site Home - MSDN Blogs

 

Regards

James.

[andybarker27]

defo checked sync says success and only one ou selected. the manual is slightly different I think as its based on a older version of dirsync.

[EduTech]

defo checked sync says success and only one ou selected. the manual is slightly different I think as its based on a older version of dirsync.

 

Did you run a Full Import once you had made the modifications. When the job is running in FIM can you see it filtering out the objects?

 

[andybarker27]

this is what I have

[EduTech]

this is what I have

 

Ok, Can you check to see if all of the accounts are still active or if some have been deleted. I have just tested it in my lab here and I can see from the 20 objects in a filtered out OU that only 17 were deleted according to FIM which means I need to investigate why the other 3 haven't been deleted.

 

Can you force a DirSync via PowerShell:

 

navigate to C:\Program Files\Microsoft Online Directory Sync. Then start the Directory Sync Configuration Shell by typing.\DirSyncConfigShell.psc1

 

Start-OnlineCoexistenceSync

 

If you could answer my question, and then I can concentrate on a specific area as I think I am on to something here but just need to check.

 

Thanks,

James

[andybarker27]

James thanks for taking time to try and help me, its very much appreciated. Just realised I am also following you on twitter :-)

I have just forced sync via powrshel.

 

the users within my AD are al still active, I cant delete these as they are stll needed. these till also appear on office365

[EduTech]

James thanks for taking time to try and help me, its very much appreciated. Just realised I am also following you on twitter :-)

I have just forced sync via powrshel.

 

the users within my AD are al still active, I cant delete these as they are stll needed. these till also appear on office365

 

So all of the users you have filters out ALL show within the user management portal on Office 365?

 

You may need to open a case with Microsoft Support as further information about your tenancy might required, but I will do my best to try and get it sorted here. What I have just done is the following.

 

I have a User Account that was in a Filtered Organizational Unit that was showing in Office 365, but the other users in the OU were deleted. I am just investigating the differences to try and find out why that particular object would not want to remove itself on the Office 365 portal. I think I know why, but I need to confirm during some tests before I actually tell you. :-)

 

I know you have probably said this already, but are all your users using [email protected] address?

 

Thanks,

James.

[andybarker27]

well that's strange as ive not changed anything, but yet all my users on office365 have gone. but the OU that is meant to sync no users have appeared.

 

I ran the powershell cm last night too