What objects should be syncronised from local AD

Question

We are going through the process of cleaning up AAD objects and noticed all our mailbox users are synchronised.
We are not a hybrid exchange org but our on-prem exchange does go via EOP
so, my initial thought is that the mailboxes are not needed in AAD along with a bunch of on prem security groups.

Obviously, the mailbox users don't have MFA enabled and are also disabled accounts which means our MFA reports (among other reports) are... not very usefully as they show for example 50% user have enrolled MFA... when in reality it's more like 99%

So my question, is there any documentation on best practices for object synchronisation to AAD

Answer 1

Hi,

Yes there is detailed guidance and recommendations on this process, you can filter and select users/groups/OU that you want to sync including creating attribute based filters how-to-connect-sync-configure-filtering

Hope this helps.
JS

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.