Synchronization of disabled and enabled Onepremise Active Directory users with Microsoft entra

Question

Hi,

Currently when I deactivate a user in the Onpremise active directory it remains activated in Microsoft Entra.

I want the user's status to be updated as soon as a change is made to the active directory.

I looked at the Synchronization Rules Editor but I don't know much about it.

Do you know a way to achieve this? 

THANKS

Answer 1

Hello FCH-M365,

Thanks for your question.

Sync Cycles usually take 30 mins. If you have disabled a user on-premises and want it to sync to the cloud immediately, you will need to trigger a synchronization cycle.

You can do this using:

Start-ADSyncSyncCycle -PolicyType Delta

The above will sync the changes in your environment. See: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-feature-scheduler

Regards,

Abiola

You can mark it 'Accept Answer' and upvote if this helped.

Answer 2

This doesn't work and the sync was already active with the service account.

By using the "Synchronization Rules Editor" can this allow me to do synchronization just by taking into account the "ObjectGUID" attribute of an OU? Because I just want to deactivate the users. Meeting rooms, shared boxes are deactivated in the active directory but I want them to remain active in Azure AD

Answer 3

Hi FCH-M365,

Thank you for posting in the Q&A Forums.

First, confirm that the synchronization between Active Directory and Microsoft Entra (possibly referring to Azure Active Directory or other Microsoft cloud services) is set up correctly and is working.

If you're using Azure AD Connect or another sync tool, check its configuration and sync status to make sure there are no errors or delays.

In Azure AD Connect or other sync tools, there may be specific sync rules that may have affected the user's deactivated status.

If you notice a delay in syncing, you can try manually triggering a sync to ensure that the changes take effect immediately.

You can audit user account changes in Active Directory to ensure that the changes have been applied correctly.

This can also help you determine if the changes were successfully synced to Microsoft Entra.

Check Active Directory and Microsoft Entra's logs and events for details about synchronization and user state changes.

Best regards

NeuviJ

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.