Local & 365 DIrectory Sync Issue

Question

We have recently installed the "Azure AD Connect" on our on premise server to sync with our Office 365 directory.

After the sync was run, we realized that we can't edit any user that is a duplicate (same user on both Office 365 and local server AD) where all fields are greyed and once we open one of these users to edit we get the message "This user is synchronized with your local Active Directory. Some details can be edited only through your local Active Directory."

We decided to stop the sync tool as it is causing another issue with the password (will look for a solution later), however the all users synced are not open for edit. How can I overcome this? We want to maintain our Office 365 Admin panel as the main source for creating and editing accounts.

Answer 1

Hi Wesam,

Do you have any further question?

Best regards,

Shyamal

Answer 2

Hi Wesam,

It is expected. Microsoft Online Email Routing Address (MOERA) is constructed from the person's userPrincipalName attribute in Active Directory and is automatically assigned to the cloud account during the initial sync and once created, it cannot be modified or removed in Office 365.

You can use the Azure Active Directory Module for PowerShell with your Office 365 administrator credentials to change the user ID/resets the password for a user (e.g. Set-MsolUserPrincipalName or Set-MsolUserPassword).

For detailed information, please refer to the article: Azure Active Directory MSOnline module

Best regards,

Shyamal

Answer 3

Thank you Shaymal.

This clarified my inquiry.