Google Cloud Directory Sync - Disabling accounts created via GSuite Admin Console

[tj2419]

We have GCDS set up syncing our local AD accounts up to G Suite. We sometimes have the need to just create an account via the G Suite admin console via the browser. But each time GCDS syncs it disables these accounts as they aren't in our AD.

 

Is there a way to stop this?

 

Thanks

[ADMaster]

You have two options.

1. setup the proper exclusions in GCDS to ignore these accounts on as as needed individual basis.

2. setup GCDS to ignore all users within an OU, or name pattern / prefix. Then create all the manual users in this OU or with that prefix.

 

I use option 1 as I only have a half dozen of these manual accounts.

[Katy]

There is an option in the directory sync config tool (the awful java one that runs on your DC) telling it what to do with accounts that exist in google land but aren't found in ldap. I think the default is to suspend them, the other options being delete or ignore.