Can you exclude an OU in 365 Dirsync

[robjduk]

Afternoon all,

My 365 setup is going very well however I am finding my problem is we have SLG accounts in the domain and 365 is finding it hard because the SLG accounts have the same email address as the network account. Can I exclude these from my 365/Azure AD somehow as it just creates whatever account it finds first sadly?

I did look online and found someone claiming it can be done but each step looked more confusing than the last so hoping someone has an "education proof" solution. Worst case I will nuke the SLG account's email address unless the admins can come up with a decent reason to keep it.

 

Thanks

Edited June 25, 2015 by robjduk

[pete]

Yes.

 

We filter for just the OUs (and sub-OUs) containing human end-users.

 

Launch the Synchronisation Service Manager on whatever's hosting dirsync.

 

Management Agents tab > Active Directory connector > Right-Click > Properties > Configure Directory Partitions > Containers > Tick the OUs you want.

 

Then sync to Office365 again.

 

Be aware that excluding OUs (that were previously included) is destructive, if I remember correctly. Office365 accounts get removed/disabled if they're not in the OUs you specify.

 

Further reading from where I cribbed my notes when setting it up:

 

Directory Synchronization – Filtering OUs to Synchronize to Office 365 | Office 365 Technical Support Blog

 

Office 365 DirSync Filtering « MSExchangeGuru.com

 

https://technet.microsoft.com/en-us/library/jj710171.aspx

Edited June 25, 2015 by pete

[robjduk]

Mad question but this wont delete the accounts from the OU I dont want included and sync it back because I have hybrid running will it?

[robjduk]

Change of question, I have just done some testing and the users remains in 365/Azure AD once the OU is removed. Is there a way to hide these users as I have 3000 SLG users in my Azure I dont want now.

Thanks

[ellsandell]

Probably easiest to now deactivate the sync > delete all users> then resync with the OUs you want?

 

 

Elliot

[robjduk]

For future reference, just found this...

How to delete a user from Office 365 which has been synced with Dirsync

 

Seems to be working but removing 3000 users.... hoping there is a quicker way If only the sync asked you what to sync when it first loads!

[ellsandell]

For future reference, just found this...

How to delete a user from Office 365 which has been synced with Dirsync

 

Seems to be working but removing 3000 users.... hoping there is a quicker way If only the sync asked you what to sync when it first loads!

 

When you go through the tool you can stop it doing a full sync initially, so you can get in and change the OU settings. (Off the top of my head)

[robjduk]

agree however the synchronization manager is well hidden away. Only learnt about it from forums

[ellsandell]

We have just upgraded to the new Azure AD Connect tool which is better, but still doesn't give you the OU options without using FIM!

[ellsandell]

For future reference, just found this...

How to delete a user from Office 365 which has been synced with Dirsync

 

Seems to be working but removing 3000 users.... hoping there is a quicker way If only the sync asked you what to sync when it first loads!

 

Had another thought - of the users you want to delete are unlicensed you could use the following command?

 

Get-MsolUser -all | Where-Object {$_.isLicensed -ne "true"}| Remove-MsolUser -Force

 

Double chek it before you run it, however it should delete unlicensed users.