Microsoft Entra Connect Sync threshold warning

Question

Microsoft Entra Connect Sync threshold warning

john loader 0

We Received a message stating that Azure connect reached the 500 threshold after deleting unwanted accounts, this put the AD connect server into unhealthy. 1000 accounts were accidentally created and then removed by PowerShell

What would be the worst that could happen and what would it break within Azure?

There were 2 ad connect servers , I understand that one can only be active at one time. the accounts that were deleted were not required.

Thanks

1 answer

Your answer

Answer 1

Andy David - MVP 157.5K MVP Volunteer Moderator

Allow the deletes to go through, then set back to 500 threshold

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-feature-prevent-accidental-deletes#if-all-deletes-are-desired

Very easy and safe!

john loader 0 Reputation points

2024-07-17T22:03:37.8133333+00:00

Hi, Thank you for this, my question isn't so much how to resolve the issue as the deletes went through, I wanted to know potential damage (worst case scenario) could have been caused with the ad connect server being in an unhealthy state? Would it actually break anything? I'm assuming that whilst synchronisation wasn't occurring any changes made in AD would not have occurred until AD connect was back to a healthy state? But as said my main question is what damage could it potentially have caused
Andy David - MVP 157.5K Reputation points MVP Volunteer Moderator

2024-07-17T22:08:37.91+00:00

No damage. Just, as you say, no updates in Azure from on-prem until you resolve it. Its essentially in a holding pattern until you allow those deletes.
john loader 0 Reputation points

2024-07-18T05:27:29.95+00:00

would you expect to see sign in failures, azure apps notworking, in essence would it stop users from working or accessing app, or conditional access issues?

Share via

Microsoft Entra Connect Sync threshold warning

1 answer

Your answer