double dots name prevent synchronization group to Azure

case: on-premise user or group with two consecutive dots in name like "Group..1"; AADC synchronization rule with simply flow mailnickname (direct) alias

error: wrong mailnickname (but mailnickname is empty in the source directory)

employeeOrgDataCostCenter

place for Division or different org unit id?

recover/restore security groups in Azure

Restoring/recovering security groups in Azure is always permanent - we can't back with them... so in case of accidental deletion in On-Premise environment we are always in ... - according to this thread.

So if You have aadc - Azure AD Connect or something different to sync on premise with Azure every time when accidental deletion occurs every time deleted group will be lost. Stupid. Sollution for small companies.

Azure AD Connect - prevent mass deletion of groups

Again we have the same problem with deleted security groups (change in synchronized containers, one of them have groups synchronized - outside of project, but very, very important groups), so how can we counteract groups deletion?

Maybe I can export last runtime log?

Get-ADSyncRunProfileResult [-RunHistoryId ] [-ConnectorId ] [-RunProfileId ] [-RunNumber ] [-NumberRequested ] [-RunStepDetails] [-StepNumber ] [-WhatIf] [-Confirm] []

Get-ADSyncRunStepResult [-RunHistoryId ] [-StepHistoryId ] [-First] [-StepNumber ] [-WhatIf] [-Confirm] []

Invoke-ADSyncRunProfile -ConnectorName -RunProfileName [-Resume] []



So I must change default synchronization cycles to my own cycles using Invoke-ADSyncRunProfile with imports for and analysis of deletion - I must stop exports to Azure when deletion of groups appear in syncstep, but can I look for waiting deletion in connector space for Azure?

Is there any interface, API? Lithnet module for PowerShell?

ADSync database shrink

We have problem with a huge ADSync database and we are in process of shrinking - we can't do upgrade to new Entra tool, so shrinking loooks like below:
c:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Binn\SQLCMD.exe -S "(localdb)\.\ADSync2019"
(sqlcmd prompt) DBCC shrinkdatabase(ADSync,1);
(sqlcmd prompt) GO

ADSync database statistics

c:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Binn\SQLCMD.exe -S "(localdb)\.\ADSync2019"
(sqlcmd prompt) USE ADSync;
(sqlcmd prompt) EXEC sp_spaceused @updateusage = N'TRUE';
(sqlcmd prompt) GO

how to find all placeholders in MV of Azure AD Connect?

Import-Module "C:\Program Files\Microsoft Azure Active Directory Connect\Tools\AdSyncTools.psm1"

Export-ADSyncToolsAadDisconnectors

0x80040e14 during Azure ADConnect upgrade

During upgrade Azure ADConnect to Entra AD Connect 2.3.8.0 we've received 0x80040e14 error. At first we had an idea that it's connected with permission or communication limitation on firewall, after quick search possible reasons:

missing column

or not enough memory for sql

For us it's near not enough memory reason, but we have still SQL Express, so during upgrade there is no place for finishing upgrade (limit 10GB for database size). We must find if we have any not needed objects to remove them from Azure or to move to full SQL server.

Azure - missing resource and resource group

Strange - I have some resource on my billing but I can't find resource or resource group/type on the portal. Case is registered in Microsoft - I'm curious how it is possible and what are the ways to find it (by PowerShell?) and manage.