Active Directory Administration Cookbook

How it works...

Increasing regulations, including Europe's General Data Protection Regulation (GDPR), force organizations to protect the privacy of people in technology. While it can be argued that synchronizing from Active Directory to Azure AD serves the same purposes in an employer-employee relationship, other organizations may have difficulties synchronizing over a hundred attributes for users, groups, contacts, and devices. Azure AD Connect offers the Azure AD app and attribute filtering functionality to address the needs of this latter kind of organization.

In contrast to stopping synchronization of objects using Domain and OU filtering, where the object eventually disappears, when organizations stop synchronizing certain attributes ...