Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDEasy
An organization is setting up Microsoft Entra Connect to synchronize identities from its on-premises Active Directory Domain Services (AD DS) to Microsoft Entra ID. They have several Organizational Units (OUs) that contain service accounts and legacy users which should *not* be synchronized to the cloud. You need to configure Microsoft Entra Connect to exclude these specific OUs from synchronization. What is the most efficient way to achieve this?
- ADisable the synchronization for the entire domain via PowerShell.
- BModify the synchronization rules in Synchronization Service Manager.
- CConfigure attribute-based filtering for each user in the OUs.
- DUse OU-based filtering during the Microsoft Entra Connect installation wizard.
Show answer & explanationAnswer & explanation
Correct answer: D. Use OU-based filtering during the Microsoft Entra Connect installation wizard.
The most efficient way to exclude specific OUs from synchronization is to use OU-based filtering during the Microsoft Entra Connect installation wizard. This allows for straightforward selection of OUs to include or exclude.
Why the other options are wrong
- A. Disabling synchronization for the entire domain is too broad and would prevent all other desired users from synchronizing.
- B. Modifying synchronization rules is more complex and less efficient for simple OU exclusion during initial setup.
- C. Attribute-based filtering is for individual users or groups based on attributes, not whole OUs efficiently.
Microsoft Entra Connect OU Filtering
A feature in Microsoft Entra Connect that allows administrators to select which Organizational Units (OUs) from the on-premises Active Directory should be synchronized to Microsoft Entra ID.
- Configured during initial setup or post-installation.
- Excludes entire OUs from synchronization.
- Prevents unwanted objects (e.g., service accounts) from appearing in Microsoft Entra ID.
- Can be modified later using the Microsoft Entra Connect wizard.
Memory trick: OU filtering: Only Upload Useful OUs.