Remove an OU from DirSync in the middle of a Staged Migration

I have been successfully DirSync 4 thousand users during a staged migration.
I just realized there is an entire OU filled with 1200 "users" that are simply place holders for wireless users.
I am not a network guy but I recognize this a security mechanism or the like - but it does not need to be synced.

Anyway, my question is how can I exclude this OU now that it is already "Syncing"?

Thank you for your time in advance.
LVL 8
K BAsked:
Who is Participating?
 
Jakob DigranesSenior ConsultantCommented:
Yes .... and within a couple of hours, users not synced will be removed from O365
0
 
IvanSystem EngineerCommented:
Hi,

I don't think there is a "stop" button for this. After sync is done, you can configure exclusion for OU, export Azure AD (from dyr sync tool) and do a Full Sync Full Import, so that specified OU get's deleted from Office 365.

Regards
0
 
K BAuthor Commented:
Will this cause an interruption of service?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
IvanSystem EngineerCommented:
Well, I have done this few days ago and everything was working. Required users got deleted, I was logged on the entire time on office 365, Lync worked for all users..

I don't think there is any interruption, but I am not 100% sure.
0
 
Jakob DigranesSenior ConsultantCommented:
@spriggan13 is correct.... as long as you don't remove any users with licenses and mailboxes assigned to them - no probl
0
 
K BAuthor Commented:
So I don't stop DirSync in any way?

1. I configure the OU exclusions (where in DirSync)?

   2. Then Remove-MsolUser ...the users I don't want synced (& removefromrecyclebin) ?
      3. Anything else?


Thanks again!
0
 
Jakob DigranesSenior ConsultantCommented:
only 1.
http://blogs.msdn.com/b/denotation/archive/2012/11/21/installing-and-configure-dirsync-with-ou-level-filtering-for-office365.aspx 
remove OU here then run full import full sync

no need to delete users from OFfice 365 -- they'll be removed from recycle bin in 30 days
0
 
IvanSystem EngineerCommented:
Hi,

as jakob_si said, you don't delete users that were synced from you AD by going to Office 365 and deleting them there.
When you configure OU or users filtering in DirSync, those OU/users will get deleted from Office 365.

So:
1. Configure DirSync filtering so required OU/users get filtered
2. Run Export Azure AD, from DirSync tool --> this will delete those OU/users after you run command in step 3.
3. Run Full Import Full Sync from DirSync tool
0
 
K BAuthor Commented:
Thanks Gents,

So in summary I do not rerun the DirSync setup.. instead I run:

1.      From your DirSync Server navigate to <Drive>\Program Files\Microsoft Online Directory Sync\SYNCBUS\Synchronization Service\UIShell

2.      Double click on miisclient.exe

3.      In Identity Manager, click Management Agents, and then double-click SourceAD.

4.      Click Configure Directory Partitions, and then click Container.

5.      When prompted, enter your domain credentials for the on-premises Active Directory forest.

6.      In the Select Containers dialog box, clear the OUs that you want to skip from syncing to Office365, and then click OK.

7.      Click OK on the SourceAD Properties page.

8.      Perform a full sync: on the Management Agent tab, right-click SourceAD, click Run, click Full Import Full Sync, and then click OK.
0
 
K BAuthor Commented:
Close App & restart the FIM service before Step 8?

Does this sound logical?  Heard this from a SME

thoughts?
0
 
Jakob DigranesSenior ConsultantCommented:
never done that
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.