Problem with users in Office 365 and Dyrsinc

[castisk8]

Good morning to all

 

This is my first post,so i have to say thanks to all of us only if you read it

 

The point is,i have two domain controller in our company,both are replicated correctly,in another server i have Dirsync and MIIS to made the replica with the users in our Active Directory to the Office 365 platform

 

The problem is this,we have a few users that are in our domain,and all of them are correctly replicated with office 365 using the same user as password,but we have made another OU that contain external users and none of them are going to need to sign in the domain because they are external users,the problem is,that this users have been sincronized in the first replication,and none of them can change the password in the cloud,they have to do it in the domain,but no one is going to sign in the domain,our idea was:

 

1-Erase the users from the ou and see that ou is replicated in both servers and it is empty

2.-Sync with MIIS and Office 365 and see that those users are being deleted in the office administrator panel.

3.-Re add the deleted users in office 365,and see that this users are "In the cloud" and not "Replicated with active directory" ,so they can change succesfully the password in the webmail

4.-When Dirsync makes the replication,it always delete the users again and again,and we have to undelete this users in the office 365 to make the account available again

 

The replication is made every 3 hours,we have tried to change the schedule replication to 12 hours,but it does again every 3 hours

 

Any help will be appreciated

 

Thanks!

[Boredguy]

So basically you want to limit the OU's that are being synchronised?

 

If so, that's possible to do.

Launch the Directory Sync application

Go to Management Agents and select the properties of the Active Directory Connector

Go to Configure Directory Partitions and click Containers

Enter an AD username and password.

Untick the OU that you do not wish to sync up to 365.

 

Then perform a full sync via powershell.

[castisk8]

Thanks ,we have made exactly as you said but the problem is this :

 

We have unchecked the ou of the users that doesn't need local account in our active directory,so Dirsync,delete this users after the replication in Office 365 ,we have to undelete the users that have been erased,and after a while,Dirsync do the same

 

We have tried to delete the users directly ,and left the ou empty,after dirsync do his job,we see that the users have been deleted again.

 

We have made a filter to exclude the ou with an attribute but the problem persist,so each time dirsync do the job,we have to go to office 365 and check in deleted users and restore them again.

 

 

Thanks!