JordanN.52363 (Customer) asked a question.
Disable Synced with Active Directory for old users
When a user leaves, especially an executive, there are a lot of times when we want to keep their O365 mailbox as a Shared Mailbox and just hide it from the GAL. The issue we have is we cannot enable the "Hide From Address" list in O365 because of the Okta integration. Even when we move the user out of an AD container that Syncs with Okta, the user still shows as Synced with AD in O365.
I have seen several articles about how you can turn off the Sync through Powershell, but you have to wait up to 72 hours for the sync to disable and even then it is for ALL users. Is there a strategy for Okta user to break the AD sync settings in O365 for just a single user?
Hi Jordan,
One option would be to change those users' Office accounts over to a non-federated domain - the process is described in this article: https://support.okta.com/help/s/article/Useful-Powershell-Commands-for-Managing-Your-Okta-Office365-Integration
Set-MsolUserPrincipalName
Set-MsolUserPrincipalName -UserPrincipalName user@contoso.com -NewUserPrincipalName user@contos.onmicrosoft.com - renames a user. This allows you to change a federated user from your _____.com domain to Microsoft's default _____.onmicrosoft.com domain.
Thank You,
Andrei Aldea
Technical Support Engineer
Okta Global Customer Care