返回
-
标题
Hybrid Azure AD Cloud Object’s UPN were not changed after the product update the domain name for the local AD object during Domain Move -
说明
Domain Move can not remove the domain because Hybrid Object’s UPN were not being updated in the tenant after Domain Move remove the domain from the local AD objects. Example below
Administrator wants to remove domain contoso.com from tenant contoso.onmicrosoft.com and replace their UPN with contoso.onmicrosoft.com domain name. However, there are still users with upn@contoso.com stamped on the hybrid Azure AD Objects. Azure AD Connect was not syncing the on-prem object changes to the cloud, particularly for the UPN attribute.
-
解决办法
Feature SynchronizeUpnForManagedUsers feature was not enabled.
“Historically, updates to the UserPrincipalName attribute using the sync service from on-premises has been blocked, unless both of these conditions were true:
- The user is managed (non-federated).
- The user has not been assigned a license.
Once the feature was enabled using the command
Set-MsolDirSyncFeature -Feature SynchronizeUpnForManagedUsers -Enable $true