Azure AD Sync is syncing deselected OU's

Thomas Durso 25 Reputation points
2025-06-18T01:09:37.9833333+00:00

Hi All,

I have recently noticed that users from an unselected OU are syncing to Entra.

They are nested within a selected OU as shown in this screenshot.

I have done some research but can not seem to find a solution.

User's image

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

Accepted answer
  1. Eric Nguyen 1,025 Reputation points Independent Advisor
    2025-06-18T07:22:14.9933333+00:00

    Hi @Thomas Durso,

    Thank you for contacting Q&A Forum. I would like to provide my findings and proposed solution:

    Use Filtering by OU Properly

    Ensure the box next to SAC is explicitly unchecked and:

    You click "Next" through the wizard and apply the changes.

    Then force a sync using:

    powershell:

    Start-ADSyncSyncCycle -PolicyType Delta

    If the change doesn't apply, consider doing a full sync:

    powershell:

    Start-ADSyncSyncCycle -PolicyType Initial
    Then, search the users in sync service/connectors/AAD-onmicrosoft.com/pending export to see if any unwanted users are there.

    Kindly let me know if this work for you and please let me know if you have any further questions.

    If I have answered your question, please accept this answer as a token of appreciation and don't forget to give a thumbs up for "Was it helpful"!

    Best regards,
    Eric


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.