Azure AD Connect sync: Prevent accidental deletes

Stopped deletion threshold

Event iD 6950 and it appears in the azure ad synchronization service manager

The following error occurs after

Any of the three actions

• Changes to filtering where an entire OU or domain is unselected.
  

• All objects in an OU are deleted.
  

• An OU is renamed so all objects in it are considered to be out of scope for synchronization.
  

 Ref: <https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes>

If this was unexpected, then investigate and take corrective actions. To see which objects are about to be deleted, do the following:

1. Start Synchronization Service from the Start Menu.
   
2. Go to Connectors.
   
3. Select the Connector with type Azure Active Directory.
   
4. Under Actions to the right, select Search Connector Space.
   
5. In the pop-up under Scope, select Disconnected Since and pick a time in the past. Click Search. This page provides a view of all objects about to be deleted. By clicking each item, you can get additional information about the object. You can also click Column Setting to add additional attributes to be visible in the grid.
   

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes

From <https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes>

How to solve it

First check the Deletion Threshold

get-ADSyncExportDeletionThreshold | FT

Run

Disable-ADSyncExportDeletionThreshold

Then

Start-ADSyncSyncCycle -PolicyType Delta

Now working fine

Then reenable the Threshold

Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500

Replace 500 with the value you noticed when retrieving the current deletion threshold.