In this article we are going to take a look at changing which objects get synced to Office 365 through organizational unit (OU) filtering. By default Azure AD Connect is configured to sync all objects in all OUs. Filtering allows us exclude OUs, and the objects they contain, so they are not synchronized to Office 365. An example of this may be to exclude an OU that contains service accounts for on-premises applications.
In our example, we are going to narrow our sync scope to just a few select organizational units in the domain skaro.local. We will be working with the latest version of Azure AD Connect and a single forest environment.
Let’s get started!
Selecting which OUs to synchronize
First, log onto the server where you have Azure AD Connect installed and open the Synchronization Service program.
This opens the Synchronization Service Manager. From here select the Connectors tab. Under the Connectors section double-click the name of your local Active Directory. In my example, this is SKARO.LOCAL. This will bring up the Properties screen for that connector.