Azure AD Connect – Configure the “Enable-ADSyncExportDeletionThreshold” wisely

Today would shed some light on the cmdlet “Enable-ADSyncExportDeletionThreshold” which comes with the Azure AD Connect. If you are using Azure AD Connect to synchronize your On-Premise Active Directory to Azure Active Directory, Azure AD Connect will never execute a batch of more than 500 objects to delete. You can check the current value by using “Get-ADSyncExportDeletionThreshold”:

So this means, you should consider to adjust this value to your needs. If a misconfiguration is happening, and a huge amount of objects is no longer synced to Azure AD, this may interrupt some business. And what means huge for your business? If your business consists about 5000 users, allowing to delete 499 Object at once could be too much.

After you have decided, which value is correct within your environment, you can configure the threshold with the “Enable-ADSyncExportDeletionThreshold” cmdlet:

See also this Microsoft Article: Azure AD Connect sync: Prevent accidental deletes

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.