"Hard match" for ADConnect

 

 

 

 

 

"Hard match" for ADConnect

 

 

On user properties  go down and find On-premises immutable ID (in this case is

QOqq1+9+7ESYAJc+xpRKAA==) of account that will be deleted.

 

Then collect Object ID from user that will stay

 

Pause synchronization by opening  Azure AD connect application

Delete 2 times user duplicate ( with no files attached)

Verify msds consistansy is not empty

 

 

If it empty  use object Duig to paste it to ms ds

 

 

 

Make sure user deleted twice ( from deleted users as well)

In case its not installed ( not Active directory teamstransport case)

install-module azuread

install-module msonline

 

 

 

Run only if session ended  ( computer restarted)

connect-azuread

 

connect-msolservice

 

 Set-AzureADUser -objectID XXXXXXX -ImmutableId XXXXXXX

Object ID its “good user” , and Immutebleld ID its from deleted user, replace and run sync

 

 

 

Set-AzureADUser -objectID 6215c50a-242a-4723-89aa-xxxxxxxxxxxx -ImmutableId LBWfMzBWxxxxxxxxxfaWSILpw==

 

 

Start-ADSyncSyncCycle Delta

Run Synchronization Service Manage  to monitor synchronization