Stopped deletion threshold
Event iD 6950 and it appears in the azure ad synchronization service manager
The following error occurs after
Any of the three actions
-
Changes to filtering where an entire OU or domain is unselected.
-
All objects in an OU are deleted.
-
An OU is renamed so all objects in it are considered to be out of scope for synchronization.
Ref: <https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-prevent-accidental-deletes>
If this was unexpected, then investigate and take corrective actions. To see which objects are about to be deleted, do the following:
- Start Synchronization Service from the Start Menu.
- Go to Connectors.
- Select the Connector with type Azure Active Directory.
- Under Actions to the right, select Search Connector Space.
- In the pop-up under Scope, select Disconnected Since and pick a time in the past. Click Search. This page provides a view of all objects about to be deleted. By clicking each item, you can get additional information about the object. You can also click Column Setting to add additional attributes to be visible in the grid.
How to solve it
First check the Deletion Threshold
get-ADSyncExportDeletionThreshold | FT
Run
Disable-ADSyncExportDeletionThreshold
Then
Start-ADSyncSyncCycle -PolicyType Delta
Now working fine
Then reenable the Threshold
Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500
Replace 500 with the value you noticed when retrieving the current deletion threshold.
Leave a Reply