Azure AD Connect Issue with recreated AD

[cygnes]

hi, we were the victim of a cyber attack recently (it was in the news) and we have had to recreate everything ! including building a new domain, unfortunately we were advised not to re use our old internal domain, and i had to disable ad sync as it was causing issues with our office 365 users.

 

I've reinstalled Azure AD Connect and it's syncing with our tenant, however, it's not linking back up with all our existing users, and i'm getting synchronization reports stating that the object has been updated, but with some modified properties, because the following attributes are associated with another object, which i guess they are ( the old Synced users in office 365)

 

what i would like to know if there is a way to link all the users backup (all local usernames exactly match the old ones ) i've updated the proxy address attribute in AD, and recreated the alternate domain for our domain forest as we use a different internal domain than our email domain.

 

i'm just at a point where i want to bang my head against the wall at the moment.

 

has anyone else had similar issues ?

 

Thanks

[mavhc]

Probably easiest to get MS to call you, they're pretty good at fixing these things, and it's free

[Davit2005]

Everytime I've spoken to Azure regarding AD connect they have pretty much been on the ball, they have a dedicated team for this. I used to log the call through the Office 365 admin portal.

[houlta]

If you already have users in the cloud and users in the local AD it can be a major pita to set it up...

 

You basically need to ensure the local AD SMTP value matches the email address in the Azure domain and it 'should' sync.

 

Some previous threads on this I remember-

http://www.edugeek.net/forums/cloud-services/202467-office-365-cloud-user-ad-user.html

 

http://www.edugeek.net/forums/cloud-services/196212-office-365-sso.html

Edited March 22, 2019 by houlta

[HPlum78]

Need to take a look at the data in the meta verse, should be able to solve the issues would need to mach up what's in the connector spaces. It's not a job that could be done via this forum tho and if you have access to MS prem then get those boys on it.

[chaplic]

Ultimately it depends on what your immtuableID is and was and how things will join. Usernames are probably not relevant. But agree with other posters, call Microsoft - this is a tightly defined issue with an concrete desired outcome but an uncommon practise.