Azure AD Connect: synchronize specific users from an OU after AD Connect deployment

Question

I need to selectively synchronize users from a specific OU.
This OU has several service accounts that cannot be moved to another OU and which should not be synced with Azure AD.
The deployment of Azure AD Connect is already done with a filter by several OUs.

I looked at the article https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering
But everything is described in rather general terms and there are no good examples.
I tried adding multiple filtering rules but they didn't work.

About synchronizing users based on a group, it is recommended only for test use. And is available only during the initial AD Connect setup.

Answer 1

Hi @AllanStark-4537 · Thank you for reaching out.

You should consider using Attribute Based filtering as mentioned under Negative filtering: "do not sync these" with step by step instructions along with screenshots. This includes a great example where, you can filter out (not synchronize) all users where extensionAttribute15 has the value NoSync.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

After a lot of trial and error, I finally got it...