AAD Connect OU Filtering

Question

question

DavidS-9545 asked Apr 1, '22 DavidS-9545 commented Apr 1, '22

AAD Connect OU Filtering

We have a sizable directory and I'm interested in filtering the SYSTEM OU for our AAD connect configuration.
I have performed some searches and am not seeing where this is a question that has come up.
We currently have ~30,000 objects in our SYSTEM OU, and from previous experience, there should not be anything needed from this location in the cloud. Can anybody provide some information regarding the relevance of syncing the SYSTEM OU and if local customizations (Possible Examples?) in the directory would require this OU's objects in O365?

azure-ad-connect

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-01T17:25:26.18Z

AndyDavid answered Apr 1, '22 DavidS-9545 commented Apr 1, '22

AADConnect only syncs "identity objects"
https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/active-directory/hybrid/concept-azure-ad-connect-sync-architecture.md

with some exceptions:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-user-and-contacts

So unless you have identities in that system OU ( and not AD Config objects) , nothing will be synced from it.

This is the default config that will be sycned:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-default-configuration

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidS-9545 · Apr 01 at 05:49 PM

Got it!
Ran a metaverse search for each of the object types; person, group, device, public folder, and the total of these objects match the number of objects being synchronized.
Thank you for the quick response and help understanding this!

1 ·

question