Azure AD Connect-Fehler: Stopped-Deletion-Threshold-Exceeded

Azure ad Verbinden Fehler stopped-deletion-threshold-exceeded. Azure ad Connect suddenly stopped replicating changes to Azure ad, including new user creations. Synchronization Service Manager showsstopped-deletion-threshold-exceeded against an Export operation.

Lösung

In Azure ad Verbinden, there is a feature enabled by default to prevent more than 500 deletes.

The feature is designed to protect a customer from accidental Azure ad Connect configuration changes and changes to the local Active Directory, that would affect many objects.

To temporarily disable this protection and allow the deletes to be processed, Führen Sie Folgendes aus PowerShell Cmdlet:

Disable-ADSyncExportDeletionThreshold

Provide Azure ad Global Administrator credentials for the tenant when prompted.

When the threshold is disabled, force a full synchronization:

Start-ADSyncSyncCycle -PolicyType Initial

Monitor the results, and wait for the full synchronization cycle to complete.

Then re-enable the protection threshold:

Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500