Deleting an AD user and the effect on Teams

[Jawloms]

I have a teacher that for a very long reason I want to delete from AD and then re-create as a new user. She has an O365 account which is sync'd from AD. What will happen to her O365 account and all the Teams she is in? Email is on-site exchange so I can sort that.

 

Thank you

 

Stuart

[Tefters]

A sh×t storm, it's all done via guid behind the scenes.

 

Why can't you just rename the AD account and relevant attributes?

[Katy]

If you're lucky and you delete it then recreate it with the same UPN before you let AADConnect sync run, it'll reconnect up okay - I've had this once where I deleted a user by accident. Might be worth trying that with a test user first though.

[HPlum78]

The sync engine and this depends on how old your AADC (dirsync) install is uses an anchor and should be immutable for the life time of an object, that is across both local AD and Azure AD. The UPN has little to do with how the sync engine matches objects between on perm and cloud, although it will complain if you end up with duplicate attributes and actively protects you from that happing in your tenant. You can if you still are able get the immutable value and with a little powershell magic it is possible to shoe horn this back on to a new on prem object (identity/ user account) but I will say this and have always said this identities should never be resurrected. Edited September 8, 2020 by HPlum78

[HPlum78]

Here is a link that explains it better than I can: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-design-concepts

[chaplic]

Assuming your azureadconnect is up to date and you're not doing anything unusual with source anchor

 

Record the MsDSConsistencyGUID of the the to-be-deleted user.

Stop Azure AD Connect sync

 

Delete the user (I dont think I've ever, ever done this before but it's your call!)

 

Create the new user account, enter the msdsconssitencyguid of the old user in the new user

 

re-enable sync

 

Test it first!

[HPlum78]

http://www.edugeek.net/forums/cloud-services/217204-azure-renamed-ou-azure-complaining-error-type-attributevaluemustbeunique.html#post1858889

 

I am just going to link back to the above post as I have tried to give a high level overview of how the sync engine works, this will help when you are looking at sync issues and errors and how certain actions could cause you issues.