Azure AD Connect sync: Prevent accidental deletes


Stopped deletion threshold

Event iD 6950 and it appears in the azure ad synchronization service manager

The following error occurs after

Any of the three actions

  • Changes to filtering where an entire OU or domain is unselected.

  • All objects in an OU are deleted.

  • An OU is renamed so all objects in it are considered to be out of scope for synchronization.

 Ref: <https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes>

If this was unexpected, then investigate and take corrective actions. To see which objects are about to be deleted, do the following:

  1. Start Synchronization Service from the Start Menu.
  2. Go to Connectors.
  3. Select the Connector with type Azure Active Directory.
  4. Under Actions to the right, select Search Connector Space.
  5. In the pop-up under Scope, select Disconnected Since and pick a time in the past. Click Search. This page provides a view of all objects about to be deleted. By clicking each item, you can get additional information about the object. You can also click Column Setting to add additional attributes to be visible in the grid.

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes

From <https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes>

How to solve it

First check the Deletion Threshold

get-ADSyncExportDeletionThreshold | FT

Run

Disable-ADSyncExportDeletionThreshold

Then

Start-ADSyncSyncCycle -PolicyType Delta

Now working fine

Then reenable the Threshold

Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500

Replace 500 with the value you noticed when retrieving the current deletion threshold.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.