Posey's Tips & Tricks
Removing Unwanted Office 365 Directory Synchronizations
With help from the Microsoft Office Services Sign-In Assistant, you can delay or pause synchronizations in Office 365.
Several months ago, I was asked by one of Microsoft's subsidiaries to create some educational videos related to Microsoft Azure and Office 365. I won't bore you with all of the details of the production, but one of the topics that I ended up covering was directory synchronization for Office 365. Although I managed to get the video project finished, it ended up being such a massive undertaking that I was working right down to the last minute, and thought for sure that I was going to end up missing my flight home. Thankfully, there was just enough time to save all of my work, and get out the door ahead of rush-hour traffic.
A few days after arriving back home, I realized that I had been a little bit too hasty in my departure. The problem was that for various reasons, I had to use my real Office 365 account for some of the videos, rather than using a trial account or a lab account (it's a long story). In doing so, I had established Active Directory synchronization between my production Office 365 account, and a lab-based Active Directory environment. The problem was that I forgot to break the synchronization before deleting my lab environment. Even today, Office 365 still nags me with synchronization errors like the one shown in Figure 1.
Because of an extremely busy schedule, I just have not had time to fix this problem. However, now seems like as good of a time as any, so I wanted to bring you along for the ride, and show you how to remove an unwanted directory synchronization.
The first step in breaking the unwanted directory synchronization is to download and install the Microsoft Online Services Sign-In Assistant for IT Professionals. You can download bot the 32-bit and the 64-Bit version here.
When the download completes, launch the Microsoft Online Services Sign-in Assistant Setup Wizard. This wizard, which you can see in Figure 2, is simple to install.
Once the Microsoft Office Services Sign-In Assistant is installed, click on the Windows Start button, and then type Azure. You should see the Microsoft Azure Active Directory Module for Windows PowerShell listed among the search results, as shown in Figure 3. Go ahead and open the Microsoft Azure Active Directory Module for Windows PowerShell.
The next step in the process is to establish connectivity to Office 365. To do so, enter these commands:
Connect-MsolService -Credential $Cred
The first line of code listed above will prompt you to enter a set of credentials. Be sure to use your administrative credentials for Office 365. The second line of code uses those credentials to establish connectivity to Office 365 from PowerShell. You can see what this looks like in Figure 4. Incidentally, if you want to verify that the connection is working, you can use the Get-MsolUser cmdlet to retrieve a list of your Office 365 user accounts.
Now that you have successfully connected to Office 365, the last step is to disable Office 365 directory synchronization. To do so, enter the following command:
Set-MsolDirSyncEnabled -EnableDirSync $false
You can see what this command looks like in Figure 5.
When you disable directory synchronization, the change is not reflected immediately. The Office 365 Admin Center will continue to show that directory sync is enabled for a period of time, but should eventually reflect your change, as shown in Figure 6.
Brien Posey is a seven time Microsoft MVP with over two decades of IT experience. As a freelance writer, Posey has written many thousands of articles and written or contributed to several dozen books on a wide variety of IT topics. Prior to going freelance, Posey was a CIO for a national chain of hospitals and healthcare facilities. He has also served as a network administrator for some of the country's largest insurance companies and for the Department of Defense at Fort Knox. When He isn't busy writing, Brien Posey enjoys exotic travel, scuba diving, and racing his Cigarette boat. You can visit his personal Web site at: www.brienposey.com.