AD sync Problem

Question

Hi,

we having a problem with our AD sync with O365.

Right now we are in testing face of migration, domain is added and activated at O365. we have E3 license and O365 above 15.

in the O365 we went to the Active users -more and choose the setup Ad sync after that we came in the page with 3 steps. we did  complete the steps and download the AADsync and installed on a server 2012 R2, When we install the Tool we did not see the option sync password. we did not let the tool run after the setup was finish and after the install was finish we start the AD sync tool and we can see 2 connectors one is for on-prem domain and the send one is for O365.

Now when we go to the Tool and choos on-prem connector and go to the Action tab and choose Run and Full sync we can see that sync tool is running after it stops and status is successfull but we can see nothing has been sync to the O365. when we go back to the active users there also we cannot see our on-prem users. also when go to the Active users-more- and Ad sync we get the setup option again and also in the old console the AD sync says setup.

Any idea?

Answer 1

Hi Shahin,

Is there any update?

Thanks,

Young

Answer 2

Hi Shahin,

Q: “Can we use the onprem Administrator account?”

You can use any administrator credential with read access to your on-premises AD.

Q: “We go to the connector and choose the AAD- and click run Full sync is this correct?”

We need to choose Azure AD connector, and run Export.

Given this situation, I suggest you:

1. Make sure all users are synced to Office 365.
2. After you have configured OU filtering, please follow each step here:

Apply and verify changes: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnectsync-configure-filtering/#apply-and-verify-changes

Thanks,

Young

Answer 3

Hi Yong,

Thanks for the reply,

this is our filter,

when we did setup the AD sync there was an account (Sync_SRV1_62656544) was created automatically for syncing the AD to O365, when we setup the filter we use the Account Administrator instead of that user the reson is that we dont know the Password of that user.

Account we see when we filter the sync option:

we change this account to the Administrator and then choose the OU online:

Q. can we use the onprem Administrator account? also when we try to sync only the OU that we need we go to the connector and choose the AAD- and click run Full sync is this correct?

Answer 4

Hi Shahin,

We need to select the checkbox Start the synchronization process as soon as the configuration completes.

Now the issue is that: the filtering does not work. Let’s analyze it.

1. How do you configure OU-based filtering? Please provide a screenshot of the OU filtering you have configured.
2. Go to Active Directory User and Computers (ADUC), locate the OU that you want to sync. Provide a screenshot here.

Thanks,

Young

Answer 5

Hi Young,

Thanks for the reply,

We know that we can use AAD Connect filter, but problem is, if we use the option start sync process after wizardis compeleted the the AD get sync with the O365 entirely, but when use the filter option to filter the AD then the AD dont get sync.

in short,

we install the AAD tool and remove the check mark start the sync and after use the AAD tool and filter the AD to choose the OU that we want to sync and nothing get synced.

if we dont remove the check mark after the AAD tool has been installed we can see that the AD (all of the 400 users) get sync with O365.

Thanks