25,081 questions
You can preview the changes using the MIISTool: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-object-not-syncing#preview
Get sync report from Azure AD Connect before syncing?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 53%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EF%3C/text%3E%3C/svg%3E)
FotS
106
Reputation points
Hi, so I've had to reinstall Azure AD Connect to a new server following a ransomware outbreak at work. I've got the software installed, configured, and set into Staging Mode at the moment.
My question: is there any way to preview what changes it will sync prior to my taking it out of Staging Mode and just letting it run? I'd like to see if there's going to be any major conflicts between the data that was already sync'd up and what will be sync'd up in case I did the new config wrong. Our email accounts would be affected if it's wrong....
Microsoft Security Microsoft Entra Microsoft Entra ID
2 answers
Sort by: Most helpful
-
Vasil Michev 119.5K Reputation points MVP Volunteer Moderator2021-09-16T06:26:02.693+00:00 -
FotS 106 Reputation points
2021-09-16T13:37:26.407+00:00 Thank you, though looking through the tool and the site documentation, it looks like I have to check each object individually rather than getting an actual sync change report? Granted, we're fairly small compared to where we used to be, but I still have no desire to shift through over 100 individual objects.
Sign in to comment -
-
AmanpreetSingh-MSFT 56,866 Reputation points Moderator2021-09-16T07:04:24.2+00:00 Hi @DavidLFP-3137 • Thank you for reaching out.
To see what will be exported to Azure AD when you move the staging server to production, you can perform below steps and generate a CSV file which includes all the changes to be exported.
- Start a cmd prompt and go to %ProgramFiles%\Microsoft Azure AD Sync\bin
- Run: csexport "Name of Connector" %temp%\export.xml /f:x The name of the Connector can be found in Synchronization Service. It has a name similar to "contoso.com – Azure AD" for Azure AD.
- Run: CSExportAnalyzer %temp%\export.xml > %temp%\export.csv You have a file in %temp% named export.csv that can be examined in Microsoft Excel. This file contains all changes that are about to be exported.
Read more: Verify the configuration of a server
-----------------------------------------------------------------------------------------------------------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
-
FotS 106 Reputation points
2021-09-16T13:40:16.793+00:00 Thank you, this is nice, but for some reason I'm only getting a list of updates? When I set everything back up, I reorganized AD so groups were split up into different OUs better, including moving some out to an OU that won't be sync'd to Azure AD as they aren't needed there. However, this sync report doesn't show removing any of them from Azure AD?
Sign in to comment