DeletingCloudOnlyObjectNotAllowed - Azure AD

Question

I can't find the object to delete.

Any tips?

Thank you. :)

I have tried the following commands.

Remove-MsolUser -ObjectId "fb2f6419-fb47-457a-b33f-f93f9373f6e1" -RemoveFromRecycleBin

Set-MsolUser -ObjectId "fb2f6419-fb47-457a-b33f-f93f9373f6e1" -ImmutableId "$null"

Answer 1

Hello @T. Kujala

Thank you for reaching out. I would like to inform you below:

• Error message DeletingCloudOnlyObjectNotAllowed or Error 114 usually occurs AD Connect is trying to export something, but it has DirSync Enabled set to "False".
• Basically, Sync is trying to delete a 'restored' user or other object. This is usually because a user has been moved to an un-synced OU or deleted On-Prem and cloud object has been restored.
• The easiest way to find such users would be look for accounts on Azure AD which have ImmutableID value published and DirSyncEnabled status is set to False.
• To export list of all such objects you can use following command:

Get-AzureADUser -All $true | Select-Object -Property UserPrincipalName,ObjectId,ImmutableId,DirSyncEnabled | Export-Csv -Path C:/Users1.Csv -NoTypeInformation

• Once the file is exported you can look up the csv for users which have DirSync Enabled Status as False and still ImmutableID published.
• Post finding the user you can set the ImmutableID value to null and perform a Delta sync to fix the issue.

I hope this answer helps to resolve your issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.