Azure AD Sync errors

Question

We have our Azure AD to sync up to our on-site AD with only two OU's. Somehow it synced up Exchange objects. We want to remove all of the objects in Azure AD that are not in the selected OU's to be synced. We also have four Exchange objects that somehow got deleted from Azure AD and are no sending us constant email alerts and errors in the logs.

These errors are:

Unable to update this object in Azure Active Directory, because the attribute [Username], is not valid. Update the value in your local directory services.

Tracking Id: 6ae16831-31b9-4dff-9590-e0da73faf9cf

****I tried forcing a sync but in "Synchronization Service Manager" and under "Connector Operations" it shows "completed-export-errors" for every Azure AD sync.

How would I go about removing the objects from Azure AD that are not part of the OU's to be synced and remove the four exchange objects that have been removed from Azure AD but are still giving me an error?

Answer 1

This has been resolved. We were on version 1.0.1925 and upgraded to 1.0.9131. We also noticed that we set the connectors up in the GUI and we were not running Synchronization Service as admin. Not sure which one fixed the problem but point is, this has been fixed.

Answer 2

I removed a user just to make sure it wouldn't break anything using the remove PowerShell command. We let it sit over the weekend and the user came back. The user is in a different a OU than we have selected to sync with. Is there some kind of background sync going on?

Answer 3

Hi, Alex,

OK. And I will monitor this thread in order to see any updates from you. Thanks for your efforts.

Regards,

Allen

Answer 4

The four objects are meeting room mailboxes to reserve the rooms. All the objects in Azure are not in the selected OU's to be synced. The other objects that are in Azure that are not supposed to be are also meeting room mailboxes.

I have a feeling if I remove them from the cloud I will end up getting the same errors I'm getting now which was stated above. I've already done a forced full sync and the sync still completed with errors. I will try to remove the objects from Azure and will let you know.

Answer 5

Hi, Alex,

As I understand it from your description, some objects that do not belong to the synchronized units have been somehow synchronized to Office 365 Azure AD. And you need to remove them from the cloud side.

I’d like to know if you can identify those objects. Do you know what they are? User accounts, groups or contacts? Can you actually find them from the cloud side (Office 365 Portal or Exchange Online admin center)?

If yes, my suggestions are as below:

1.    From the on-premises side, double-check and make sure that these objects are not included in the selected units which are being synchronized.

2.    Permanently delete these objects from the cloud side. If they’re common user accounts, you can use the Microsoft Azure AD PowerShellto delete them. The commands are:

a.    Remove-Msoluser -UserPrincipalName <*** Email address is removed for privacy ***>

b.    Remove-Msoluser -UserPrincipalName <*** Email address is removed for privacy ***> -RemoveFromRecyclebin –Force

3.    Force a directory synchronization.

As to the four Exchange objects, let’s consider it as a second issue. Please take the actions above and see if the Exchange objects will be gone along with what you have deleted. It is possible that they have some connections.

Looking forward to your updates.

Thanks,

Allen