How do i delete active directory information on a user account in Azure AD

Question

How do i delete active directory information on a user account in Azure AD

J-3804 1,601

Hey Team,

Our active directory has been decommissioned, there is no AD connect, no sync but some users have AD info (SAM Account name, on-premises domain name, and On-premises distinguished name...) on their profile in Azure Active Directory.

How can we delete those information, is there any impact if we delete them?

Thank you for your help.

Accepted answer

0 additional answers

Your answer

Answer 1

Harpreet Singh Matharoo 8,396 Microsoft Employee Moderator

Hello @jennifer

Thank you for your reaching. Unfortunately, this information cannot be cleared using PowerShell or Graph. You can create an Azure AD Support ticket requesting to clear all On-Premises Attributes from previously synchronized users on your tenant. Support Team should be able to contact product group with your tenant information and help you achieve this.

I hope this answer helps to resolve your issue. Please "Accept the answer" if the information helped you. This will help us and others in the community as well

RyanBuckel-2301 0 Reputation points

2023-07-12T19:05:26.14+00:00

Harpreet, I am in the exact same scenario and have had a ticket open with support for over 2 weeks. The tech has informed me that this cannot nor will not be completed on the back end by the product team. He has informed me that I will have to reenable the sync and remove the users from the DC that does not exist any longer. Can you help or clarify this information?
Daniel Solomon 5 Reputation points

2024-11-15T18:15:07.26+00:00

I'm having this issue with my tenant where we have on-prem users and cloud users. Some of the current cloud users used to be on-prem users and were converted. DirSyncEnabled is set to FALSE and they have their Immutable IDs set to $null. but still possess the OnPremisesSecurityIdentifier.

These users are AADDS users and they need to use SSPR to reset their password as AADDS dictates.

When they do reset their password via aka.ms/sspr, they get the "Contact your admin and have them enable password write-back" Write back is enabled in SSPR but password write-back is not enabled in the whole tenant. This is creating a conflict and effectively stopping any AADDS users from being able to reset their own password.

Is there a way to resolve this conflict? Do we have to reach out to MS support to remove the OnPremisesSecurityIdentifier for all of our users that need to have it removed? Is there a feature I'm missing that gets around this?

Share via

How do i delete active directory information on a user account in Azure AD

0 additional answers

Your answer