May 07, 2018 How to stop the photos from reappearing on your device Stop me if this sounds familiar: you’re running out of storage on your iPhone or iPad and so you take the time to delete a.
This topic describes the prevent accidental deletes (preventing accidental deletions) feature in Azure AD Connect.
When installing Azure AD Connect, prevent accidental deletes is enabled by default and configured to not allow an export with more than 500 deletes. This feature is designed to protect you from accidental configuration changes and changes to your on-premises directory that would affect many users and other objects.
Common scenarios when you see many deletes include:
The default value of 500 objects can be changed with PowerShell using Enable-ADSyncExportDeletionThreshold
, which is part of the AD Sync module installed with Azure Active Directory Connect. You should configure this value to fit the size of your organization. Since the sync scheduler runs every 30 minutes, the value is the number of deletes seen within 30 minutes.
If there are too many deletes staged to be exported to Azure AD, then the export stops and you receive an email like this:
Hello (technical contact). At (time) the Identity synchronization service detected that the number of deletions exceeded the configured deletion threshold for (organization name). A total of (number) objects were sent for deletion in this Identity synchronization run. This met or exceeded the configured deletion threshold value of (number) objects. We need you to provide confirmation that these deletions should be processed before we will proceed. Please see the preventing accidental deletions for more information about the error listed in this email message.
You can also see the status stopped-deletion-threshold-exceeded
when you look in the Synchronization Service Manager UI for the Export profile.
If this was unexpected, then investigate and take corrective actions. To see which objects are about to be deleted, do the following:
[!NOTE] If you aren't sure all deletes are desired, and wish to go down a safer route. You can use the PowerShell cmdlet : Enable-ADSyncExportDeletionThreshold
to set a new threshold rather than disabling the threshold which could allow undesired deletions.
If all the deletes are desired, then do the following:
Get-ADSyncExportDeletionThreshold
. Provide an Azure AD Global Administrator account and password. The default value is 500.Disable-ADSyncExportDeletionThreshold
. Provide an Azure AD Global Administrator account and password.Enable-ADSyncExportDeletionThreshold -DeletionThreshold 500
. Replace 500 with the value you noticed when retrieving the current deletion threshold. Provide an Azure AD Global Administrator account and password.Overview topics