AzureAD Connect

[Jawloms]

Hi all,

 

My Azure AD Sync says it is syncing, but that there is an error. The error is the a particular email address exists twice. I know why this is, it's because when the previous NM left, I stuck his email address on my mailbox at some point as I needed to reset a cloud password for the school which was against his email address. Azure seems to think that I have the address against my name, but also that the original account exists and has the address against his account too. If I try and delete the account online it says I can't as it is a sync'd account from my AD, however the account doesn't exists in AD and hasn't for years. I've only noticed this as I haven't used the Azure stuff for some considerable time and I've setup some new accounts which haven't sync'd up to the cloud. If AzureAD Connect and the IDFix Tool both say all is fine, what do I do to figure out why this spurious account won't delete, and why my new accounts aren't appearing?

 

Thank you

 

Stuart

[Jawloms]

P.S. All email is onsite Exchange. The newest accounts I've generated which haven't sync'd up don't have email accounts.

[keithu]

You could force a full sync to make on-prem AD and AzureAD match again:

 

Start-ADSyncSyncCycle -PolicyType Initial

[chaplic]

Odd the account is still there, do you have a retention policy setup?

 

Soft delete the user, change upn to cloud account, remove attributes, boom (*)

 

get-msolusre [email protected] and record objectID

remove-msoluser [email protected]

 

restore-msoluser -objectID -newuserprincipalname [email protected]

 

 

* This definetly worked to make an object editable in the cloud, I vaguely recall an MS blog article say it was hack and they were planning to remove, so YMMV.