Avatar of west-com
Flag for United Kingdom of Great Britain and Northern Ireland asked on

Directory Synchronization issues for Office 365 users accounts

I've setup AD DirSync for my Office 365 Domain to enable password synchronization. However, no users are appearing in O365. In the Synchronization Service Manager on my server, the local domain connector shows the correct 286 users for uploading but I don't think I have ever seen any users on the O365 domain connector for import, and, certainly, none have ever arrived.

O365 reports "Last synced less than an hour ago" and "Active Directory synchronization is activated. "
Active DirectoryMicrosoft 365Azure

Avatar of undefined
Last Comment
Vasil Michev (MVP)

8/22/2022 - Mon
Vasil Michev (MVP)

Check the Metaverse tab, search for particular user there and check the properties to find out if/why he has been filtered out. This article lists the attributes that need to be configured for a user to be synced: http://social.technet.microsoft.com/wiki/contents/articles/19901.dirsync-list-of-attributes-that-are-synced-by-the-azure-active-directory-sync-tool.aspx#How_directory_synchronization_determines_what_isn_t_synced_from_the_on-premises_environment_to_Windows_Azure_AD

And of course, double-check if any additional filtering is in place.

I've taken a sample of users who should be synched:

User objects are filtered if:
•mailNickName starts with "SystemMailbox{" -checked not relevant
•mailNickName starts with "CAS_" AND mailNickName contains "{"  -checked not relevant
•sAMAccountName starts with "CAS_" AND sAMAccountName has "}"  -checked not relevant
•sAMAccountName equals "SUPPORT_388945a0" -checked not relevant
•sAMAccountName equals "MSOL_AD_Sync" -checked not relevant
•sAMAccountName isn't present -checked They all have one
•isCriticalSystemObject is present -checked  <not set>
•msExchRecipientTypeDetails == (0x1000 OR 0x2000 OR 0x4000 OR 0x400000 OR 0x800000 OR 0x1000000 OR 0x20000000) - checked. No attribute. Exchange has never been installed in this domain

With regards to filtering:
I have setup AD DirSync only to sync users beneath a certain OU. THis OU contains all the users I wish to synchronize. I've checked this again and it looks correct.
When I installed DirSync I asked it to synchronize the members of a group "gOffice365Accounts".  Users are members of this group. I cannot see how to change this.
Vasil Michev (MVP)

View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.

The group I am using does not have nested groups.

I certainly did miss the part about not supported in production. Would you recommend uninstalling and installing an earlier version?
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes

I've looked on the Metaverse Search tab and checked a sample user.  I cannot see anything about filtering.

I had opened a ticket to Microsoft for a solution to this. Their engineer took control of my session and did some Magic, of which I was unable to follow it all, and things now work.

Thank you Microsoft and thank you Vasil for your help. I only wish I could report back on what Microsoft actually did to fix things.

Apart from Microsoft doing the final fix, This was the most helpful information.
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Vasil Michev (MVP)

Oo they are allowed to use remote control now? :)