Microsoft Certified: Identity and Access Administrator AssociateImplement an identity management solutionMedium
A company is preparing to deploy Azure AD Connect to synchronize user accounts from their on-premises Active Directory. They have a requirement to ensure that only user accounts located in specific Organizational Units (OUs) are synchronized to Azure AD, as other OUs contain service accounts and disabled user accounts that should not be synced. What is the most efficient way to achieve this during the Azure AD Connect installation?
- AImplement OU filtering during the 'Optional Features' step of Azure AD Connect configuration.
- BConfigure attribute filtering to exclude accounts based on a custom attribute.
- CManually delete unwanted synchronized accounts from Azure AD after the initial sync.
- DUse domain-based filtering to select only the required domains.
Show answer & explanationAnswer & explanation
Correct answer: A. Implement OU filtering during the 'Optional Features' step of Azure AD Connect configuration.
OU filtering is a standard and efficient feature within Azure AD Connect that allows administrators to select precisely which Organizational Units (and thus, which objects) from the on-premises Active Directory should be synchronized to Azure AD. This is configured during the initial setup or can be modified later.
Why the other options are wrong
- B. Attribute filtering is possible but less efficient for OU-based exclusion and might require more complex rule configuration.
- C. Manually deleting accounts is inefficient, prone to errors, and would not prevent future synchronization of unwanted accounts.
- D. Domain-based filtering applies to entire domains, not specific OUs within a domain.
Azure AD Connect OU Filtering
A feature within Azure AD Connect that allows administrators to select specific Organizational Units (OUs) from on-premises Active Directory for synchronization to Azure AD.
- Configured during initial setup or post-installation.
- Prevents unwanted objects (e.g., service accounts) from syncing.
- Improves security and reduces Azure AD clutter.
Memory trick: Filter your OUs carefully, so only the 'O-K' ones go to the cloud.