This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 12%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETR%3C/text%3E%3C/svg%3E)
Will Azure AD Connect sync disabled user accounts to Azure AD along with all the enabled active accounts & global security groups with default Azure AD Connect configurations and
no filtering applied during 1st sych? I guess it syncs all the accounts present on On-prem Ad to Azure AD irrespective of whether its disabled in AD or active? Correct me if i am wrong.
Yes, Global security groups from your on-premises AD are synchronized to Microsoft Entra ID, and they retain their membership and other attributes during the synchronization process. This means that if you have global security groups defined in your on-premises AD and these groups contain users or other groups, the membership information will be replicated to Microsoft Entra ID
Correct
Correct. Unless the OU or account is filtered by an attribute, all accounts will sync - even if they are AD disabled.
Thanks @Andy David - MVP for quick clarification :) Much appreciated.