AD sync Problem

Question

Hi,

we having a problem with our AD sync with O365.

Right now we are in testing face of migration, domain is added and activated at O365. we have E3 license and O365 above 15.

in the O365 we went to the Active users -more and choose the setup Ad sync after that we came in the page with 3 steps. we did  complete the steps and download the AADsync and installed on a server 2012 R2, When we install the Tool we did not see the option sync password. we did not let the tool run after the setup was finish and after the install was finish we start the AD sync tool and we can see 2 connectors one is for on-prem domain and the send one is for O365.

Now when we go to the Tool and choos on-prem connector and go to the Action tab and choose Run and Full sync we can see that sync tool is running after it stops and status is successfull but we can see nothing has been sync to the O365. when we go back to the active users there also we cannot see our on-prem users. also when go to the Active users-more- and Ad sync we get the setup option again and also in the old console the AD sync says setup.

Any idea?

Answer 1

Hi Shahin,

1. To prevent other 400 users from syncing, we need to use AAD Connect filtering. For detailed information, please see: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnectsync-configure-filtering/

The objects that are filtered out are no longer synchronized to Azure AD. As a result of this change, any objects in Azure AD that were previously synchronized but were then filtered are deleted in Azure AD.

For example, you can use Organizational-Unit–based filtering. And only put the 100 users in one syncing OU.

2. I notice you have edited your post. About “why after finishing the Active directory sync wizard the AD it take long time to see that AD sync has been enabled?? is this normal behavior?”, is this still an issue now?

Form your screenshot above, Directory sync enabled is set to true.

If you have further question about this, please provide a screenshot about this.

Thanks,

Young

Answer 2

Hi Young,

Thanks for the update,

Your suggestion will sync all of the AD to the 0365, we dont want this, becuse we have more then 500 users that only 100 has mailbox and onlu these 100 users must be move to the O365!

Also why after finishing the Active directory sync wizard the AD it take long time to see that AD sync has been enabled?? is this normal behavior?

Thanks

we did enable the dirsync from the powershell after that run a sync as you suggessted and now we see all od the AD users in O365 but as I said we dont want to sync all of the users.

Thanks

Answer 3

Hi Shahin,

You’re using Express settings. Password sync is enabled in Express settings by default.

Do not worry about the error “Users will not be able to sign-in……”. As some AD users’ UPN suffix is xxx.local. These users cannot sign into Office 365. Just ignore it, and click Next.

Can you go to the last step of the wizard: configure? We need to fully complete this wizard. Please click install.

After that, please check the result.

Thanks,

Young

Answer 4

Hi Young,

Yes I did finished these steps, but when installing the Tool 'we couldn't see the option sync users password and also see this:

Ok now in the Portal if I go to the Active users-Active directory sunc I can see manage instead of setup, but still when go to the AAD sync server , there see these 2 domains I tried both of them and Action Run and choose the Full sync nothing happens, also if I go to the Admin console I can not see the option Directory synchronization at Home!! but find this entry as you can see the sync is enabled but when run the Full Sync I cannot see the onprem AD users at O365 console.

Up date

now when we choose the mijndcompany.onmicrosoft.com (shouldnot this be Activated domain?) and run the full sync see this, but still no users at O365

Answer 5

Hi Shahin,

After the AAD Connect tool is installed we need to run Microsoft Azure Active Directory Connect wizard. During the wizard, we input the Office 365 admin credential and on-premise AD administrator credential to integrate on-premise AD with Office 365 Azure AD.

Related article: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-get-started-express/

Have you completed the wizard?

I’d like to check your Directory synchronization status. Please go to old admin center -> Directory synchronization. Provide a screenshot here. For example,

Thanks,

Young