@@ -70,56 +70,56 @@ To configure directory settings to disable automatic writeback of newly created
70
70
import-module ADSync
71
71
$precedenceValue = Read-Host -Prompt "Enter a unique sync rule precedence value [0-99]"
72
72
73
- New-ADSyncRule `
74
- -Name 'In from AAD - Group SOAinAAD Delete WriteBackOutOfScope and SoftDelete' `
75
- -Identifier 'cb871f2d-0f01-4c32-a333-ff809145b947' `
76
- -Description 'Delete AD groups that fall out of scope of Group Writeback or get Soft Deleted in Azure AD' `
77
- -Direction 'Inbound' `
78
- -Precedence $precedenceValue `
79
- -PrecedenceAfter '00000000-0000-0000-0000-000000000000' `
80
- -PrecedenceBefore '00000000-0000-0000-0000-000000000000' `
81
- -SourceObjectType 'group' `
82
- -TargetObjectType 'group' `
83
- -Connector 'b891884f-051e-4a83-95af-2544101c9083' `
84
- -LinkType 'Join' `
85
- -SoftDeleteExpiryInterval 0 `
86
- -ImmutableTag '' `
87
- -OutVariable syncRule
88
-
89
- Add-ADSyncAttributeFlowMapping `
90
- -SynchronizationRule $syncRule[0] `
91
- -Destination 'reasonFiltered' `
92
- -FlowType 'Expression' `
93
- -ValueMergeType 'Update' `
94
- -Expression 'IIF((IsPresent([reasonFiltered]) = True) && (InStr([reasonFiltered], "WriteBackOutOfScope") > 0 || InStr([reasonFiltered], "SoftDelete") > 0), "DeleteThisGroupInAD", [reasonFiltered])' `
95
- -OutVariable syncRule
96
-
97
- New-Object `
98
- -TypeName 'Microsoft.IdentityManagement.PowerShell.ObjectModel.ScopeCondition' `
99
- -ArgumentList 'cloudMastered','true','EQUAL' `
100
- -OutVariable condition0
101
-
102
- Add-ADSyncScopeConditionGroup `
103
- -SynchronizationRule $syncRule[0] `
104
- -ScopeConditions @($condition0[0]) `
105
- -OutVariable syncRule
73
+ New-ADSyncRule `
74
+ -Name 'In from AAD - Group SOAinAAD Delete WriteBackOutOfScope and SoftDelete' `
75
+ -Identifier 'cb871f2d-0f01-4c32-a333-ff809145b947' `
76
+ -Description 'Delete AD groups that fall out of scope of Group Writeback or get Soft Deleted in Azure AD' `
77
+ -Direction 'Inbound' `
78
+ -Precedence $precedenceValue `
79
+ -PrecedenceAfter '00000000-0000-0000-0000-000000000000' `
80
+ -PrecedenceBefore '00000000-0000-0000-0000-000000000000' `
81
+ -SourceObjectType 'group' `
82
+ -TargetObjectType 'group' `
83
+ -Connector 'b891884f-051e-4a83-95af-2544101c9083' `
84
+ -LinkType 'Join' `
85
+ -SoftDeleteExpiryInterval 0 `
86
+ -ImmutableTag '' `
87
+ -OutVariable syncRule
88
+
89
+ Add-ADSyncAttributeFlowMapping `
90
+ -SynchronizationRule $syncRule[0] `
91
+ -Destination 'reasonFiltered' `
92
+ -FlowType 'Expression' `
93
+ -ValueMergeType 'Update' `
94
+ -Expression 'IIF((IsPresent([reasonFiltered]) = True) && (InStr([reasonFiltered], "WriteBackOutOfScope") > 0 || InStr([reasonFiltered], "SoftDelete") > 0), "DeleteThisGroupInAD", [reasonFiltered])' `
95
+ -OutVariable syncRule
96
+
97
+ New-Object `
98
+ -TypeName 'Microsoft.IdentityManagement.PowerShell.ObjectModel.ScopeCondition' `
99
+ -ArgumentList 'cloudMastered','true','EQUAL' `
100
+ -OutVariable condition0
101
+
102
+ Add-ADSyncScopeConditionGroup `
103
+ -SynchronizationRule $syncRule[0] `
104
+ -ScopeConditions @($condition0[0]) `
105
+ -OutVariable syncRule
106
106
107
- New-Object `
108
- -TypeName 'Microsoft.IdentityManagement.PowerShell.ObjectModel.JoinCondition' `
109
- -ArgumentList 'cloudAnchor','cloudAnchor',$false `
110
- -OutVariable condition0
111
-
112
- Add-ADSyncJoinConditionGroup `
113
- -SynchronizationRule $syncRule[0] `
114
- -JoinConditions @($condition0[0]) `
115
- -OutVariable syncRule
116
-
117
- Add-ADSyncRule `
118
- -SynchronizationRule $syncRule[0]
119
-
120
- Get-ADSyncRule `
121
- -Identifier 'cb871f2d-0f01-4c32-a333-ff809145b947'
122
- ```
107
+ New-Object `
108
+ -TypeName 'Microsoft.IdentityManagement.PowerShell.ObjectModel.JoinCondition' `
109
+ -ArgumentList 'cloudAnchor','cloudAnchor',$false `
110
+ -OutVariable condition0
111
+
112
+ Add-ADSyncJoinConditionGroup `
113
+ -SynchronizationRule $syncRule[0] `
114
+ -JoinConditions @($condition0[0]) `
115
+ -OutVariable syncRule
116
+
117
+ Add-ADSyncRule `
118
+ -SynchronizationRule $syncRule[0]
119
+
120
+ Get-ADSyncRule `
121
+ -Identifier 'cb871f2d-0f01-4c32-a333-ff809145b947'
122
+ ```
123
123
124
124
4 . [ Enable group writeback] ( how-to-connect-group-writeback-enable.md ) .
125
125
5 . Enable the Azure AD Connect sync scheduler:
0 commit comments