Directory Synchronization – Filtering OUs to Synchronize to Office 365

With Office 365 being adapted for larger companies, most of them only want to synchronize the accounts from a certain OU. This is now possible with the newest version of Directory Synchronization. Microsoft released a new 64bit version of DirSync back in November of 2011. The new version is based on Forefront Identity Manager 2010 and this is the product that will allow us to filter OUs. Generally when I setup companies, I will create an OU in Active Directory where all the accounts being used by Office 365 will reside. This way I can filter out all the other OUs and only synchronize the ones identified as being cloud accounts. This was a feature that was lacking in previous versions of Directory Synchronization and it’s a welcome addition to most of my customers.

The best case scenario is to implement filtering before it synchronizes with Office 365 for the first time. When prompted at the end of the Microsoft Online Services Directory Synchronization Configuration setup, uncheck the “Synchronize Directories Now” before you click Finish

If you already have Microsoft Online Services Directory Synchronization installed, you simply uninstall the previous version and install the newest version to get this feature. You will be able to setup filtering, but you will have to manually clear all the old non active accounts from Office 365.

Open FIM 2010 – Depending on the version installed, use one of the paths below.

C:\Program Files\Microsoft Online Directory Sync\SYNCBUS\Synchronization Service\UIShell\miisclient.exe 

or

C:\Program Files\Windows Azure Active Directory Sync\SYNCBUS\Synchronization Service\UIShell\miisclient.exe

Click Management Agents

 

Right click SourceAD or Active Directory Connector

 

Click Properties


 

Select Configure Directory Partitions

 

Click the Containers… button


 

Enter the Directory Sync Service Account or another domain account with the correct permissions, when prompted (clear the MSOL_AD_Sync account)

 

Click OK


 

Select the OUs that you want to synchronize with Office 365.


 

Click OK

 

Wait for an automatic synchronization to run or force a manual synchronization

Now you see only the users in the Office365SupportLab.com OU are synchronized with Office 365.


 

Thanks for visiting and reading my posts. I am always looking for more ideas. Please comment or email me with what you would like to see.

Kelsey Epps

Office 365 MVP

Email Me Follow me on Twitter Connect with me on LinkedIN

5 thoughts on “Directory Synchronization – Filtering OUs to Synchronize to Office 365

  1. Dylan Lloyd

    This is great, but I did this and it did not change anything on my office 365 directory, I cannot even delete the ones I do not want. They are all still active and in my account.

    Reply

Leave a Reply