Local Active Directory Organisational unit to 365 Sync

[maxrebo]

I'm currently re- doing our Active Directory Organizational groups including the policies linked to these.

I've created some new Organizational units so I can move new users and computers in to here, to test

 

There's a link between our AD and office 365 where when we move users out of these Local AD OUs, and after a sync between AD and 365, these users are removed from 365.

 

I can't seem to find where this link is?, I would like to add the new Ous I've created, to this sync, would anyone know where these are, maybe in 365 Admin Centre?

[Mako]

You'll need to open the AD Connect (Soon to be Entra Connect) Sync on your on-prem server, and change the sync options to include your new OUs.

[maxrebo]

Found it, thanks. Got to the page of which OUS to sync....the default has all OUs selected, am I ok to select all?, including computer groups etc... (I Don't have a record of what was syncing before)

[Mako]

That is entirely up to you and what you want to achieve - if you select all OUs, then everything in your AD will sync. Having computers sync can be useful if you want to (co)manage via Intune.

 

If you want to have it where users are removed from 365, then unselect that particular OU. For example, we have an Archived Users OU. If someone gets moved there, they're no longer sync'd and will be removed from 365.

[maxrebo]

Thanks.

Any way of finding out what was syncing before?

[Mako]

I don't think so. Someone may correct me if I'm wrong. It is possible to export the config from AD Sync but I'm guessing that hasn't been done.