Azure Directory Sync not filtering

So I finally took to plunge and I am in the World of Office 365/Azure.

I setup the Azure Directory Sync tool and the sync worked.  After the sync I found a lot of objects that I do not need in Azure so I tried to apply the OU filtering using miisclient.exe to partition the and filter only the containers of interest. No matter what the system seems to re-populate the accounts after I remove them from Office 365 Portal. Not I am also forcing a sync using Powershell command Start-OnlineCoexistenceSync
 
img1
img2
img3
LVL 27
yo_beeDirector of Information TechnologyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Randy DownsOWNERCommented:
Maybe this will help.

CAUSE
This issue occurs for one of the following reasons:

The domain value that's used by AD DS attributes hasn't been verified.

One or more object attributes that require a unique value have a duplicate attribute value (such as the proxyAddresses attribute or the UserPrincipalName attribute) in an existing user account.

One or more object attributes violate formatting requirements that restrict the characters and the character length of attribute values.

One or more object attributes match exclusion rules for directory synchronization.

The user principal name (UPN) was changed after the initial synchronization and must be updated manually.

Exchange Online Simple Mail Transfer Protocol (SMTP) addresses of synced users aren't populated appropriately in the on-premises Active Directory schema.
yo_beeDirector of Information TechnologyAuthor Commented:
The problem is vice-versa.  I want to filter out objects that I do not want in Office 365.
Randy DownsOWNERCommented:
Have you seen this?

you can filter objects, so that only the ones you require online are synchronized. Filtering makes synchronization more secure (no forgotten accounts in the services, hence less attack Surface), in certain ways less complex and it can speed up synchronization.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

yo_beeDirector of Information TechnologyAuthor Commented:
What you gave me is what I posted in my question and this is not filtering.
I appreciate the help, but I need some that applied this method  and it worked.
footechCommented:
What's odd is that I've done this (your config looks good from what I see), and it worked just fine.  One difference I see is that I used 2008 R2, but I don't expect that would make any difference.

After setting this did you do a Full Import Full Sync?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
yo_beeDirector of Information TechnologyAuthor Commented:
No.
I will try that now.
yo_beeDirector of Information TechnologyAuthor Commented:
That was it.  I needed a fullSync.
:(
Shame on me, but I am new to this.  Thank you for your help.

Mike
footechCommented:
Glad that was it!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.